Any Polycom firmware newer than 2 - 3 years old should also support 'NAT' which is not usually do-able with H.323 connections.
However, if you have the newer firmware, you need to setup 'NAT' on the polycom, restrict the range of ports on the polycom, specify your SME's external IP in the field provided for 'external ip', then port-forward all of the ports necessary from the SME to the Polycom (the range mentioned above plus some other ports)
Or, put a router in front of the SME, make the Polycom the 'DMZ', but send the ports you want to the SME (http, https, imaps, pop3s, smtp, smtps). You'll still need to configure the NAT functionality in the polycom itself.
Here is a microsoft howto on accessing a polycom behind Microsoft ISA - just substitute 'SME' whereever you see 'ISA':
http://support.microsoft.com/kb/556039. (You don't need to create any 'outbound' rules - SME allows all outbound traffic by default).