Skip to main content
kcerb
kcerb
New Member
September 6, 2013
Question

disable SIP-ALG

  • September 6, 2013
  • 3 replies
  • 9156 views
Hi, we preparing to implement VoIP in our company and our service provider told us that our router must meet the following requirements: 1. correct support for NAPT (RFC2663) - I believe that here will no problem 2. disabled SIP-ALG - no details VoIP will be used on FGT100D with FOS5.0 patch 4. Traffic should pass from VoIP phones in our internal network (int) to PBX in our service provider (wan1) and vice-versa. I found some instruction how to disable SIP-ALG here (this instruction doesn' t come from our service provider) but I need your advice: is this instruction worthy to implement?

    3 replies

    Bunce
    Bunce
    New Member
    September 8, 2013
    We followed those same instructions and VOIP is working fine for us.
    kcerb
    kcerbAuthor
    New Member
    September 9, 2013
    Thanks Bunce
    Nicolas_Marengo
    Nicolas_Marengo
    New Member
    September 17, 2013
    Why disable the SIP-ALG? If you dont apply a voip profile to your policy, then the fortigate will use the session-helper rather than the SIP-ALG. Or am i missing something else here? " SIP sessions using port 5060 accepted by a security policy that does not include a VoIP profile are processed by the SIP session helper." " You apply the SIP ALG to SIP traffic by adding a VoIP profile with SIP enabled to a security policy that accepts SIP traffic. The SIP session helper is automatically bypassed by traffic accepted by a security policy that includes a VoIP profile." Thanks Nico
    Terms & ConditionsAccessibility statement