FortiGate/Fortinet Router Configuration
Current Status
Compatible after Changes
Suggestions
Disable SIP ALG
Comments
In the CLI of the FortiGate type the following:
- config system settings
- set sip-helper disable
- set sip-nat-trace disable
Reboot the device
In the CLI type the following:
- Config system session-helper
- show
- (now look for SIP, mostly it will be “12”)
- delete 12
Don't use any protection profiles on the firewall of the sip rules.
Change the default –voip –alg-mode. Run the following commands:
- config system settings
- set default-voip-alg-mode kernel-helper based
- end