Fortigate allows unwanted SIP traffic

Good morning,
The case concerns the FG100F.
After upgrading from 6.2 to 7.2.5 there were problems with SIP traffic.
The policy that allows SIP traffic only from Poland (geolocation) and from a few selected ip addresses from abroad also allows SIP traffic from other countries that are not on the list.
When I check through the policy lookup, I have information that the traffic should go to the implicit deny, but the logs show that the traffic goes to this policy and is allowed. At first I thought geolocation was the problem, but I tested it and it seems to be working fine. The problem is only with SIP. What could be the reason? The policy is in proxy mode and does not have a VOIP profile so it uses default.

config firewall policy
   edit 87
      set uuid 1c0ffe44-254f-51ee-4c1c-b82b6b9b89ca
      set srcintf "OUTSIDE"
      set dstintf "SIP_PUB"
      set action accept
      set srcaddr {Poland + ip list)
      set dstaddr "SIP_GRP"
      set schedule "always"
      set service "serwis_10000-65535_RTPproxy" "serwis_5060_5061_siptcp" "serwis_5060-5062_sip"
      set inspection-mode proxy
      set logtraffic all
next

config voip profile
   edit "default"
   set comment "Default VoIP profile."
   config sip
      set status disable
   end
next

SIP helper has been removed and SIP disabled in VOIP profile as customers have reported problems with SIP traffic. Currently, this setup works fine except for one client. The problem is that the policy allows SIP traffic from addresses that are not on the allowed list.