Notice that the firewall must allow three separate flows of traffic to traverse it:

Voice packets that flow between the two endpoints
SIP control messages exchanged between the two endpoints
SIP control messages exchanged between the IP PBX and the ITSP SIP server that control and regulate the SIP trunk