Can I deploy the server behind my firewall?

Yes, you can. The server can run behind firewall and use a private IP address. However, you need to open UDP ports 5060, 10000 to 2000, UDP/TCP 80 on your firewall. You also need to log into admin portal to add a SIP Device configuration under System Configuration --> SIP configuration.