The OBi is in regular communication with the ITSP SIP server, typically on port 5060. That can keep it open for incoming SIP messages. The media ports can be opened as required for a call.
In many cases, there is no need to configure any port forwarding on the router.