Technical Tip: How to disable the SIP/SDP RTP port nat without deleting the session helper globally
Description
This article describes how to disable the SIP/SDP RTP port NAT without deleting the session helper globally.
Scope
FortiGate.
Solution
Without deleting the session helper globally, a custom service can be created and added to a specific IPv4 policy to disable the SIP/SDP RTP port NAT.
Use the following CLI syntax to create a new service and disable the session-helper (note that a specific port e.g. 5060 can also be used):
config firewall service custom
edit "Helper-disable"
set protocol IP
set helper disable
next
end
Create a new IPV4 policy for SIP traffic and apply the custom service:
Related articles:
