Traffic is coming from the internet so can not be the cisco_uds record, as it is created on the internal DNS only. Collab_edge is the external DNS record. It has to be port blocked or traversal zone down. https://www.cisco.com/c/en/us/support/docs/unified-communications/expressway/118798- technote-cucm-00.html#anc6