Skip to main content
edwallig
edwallig
New Member
March 19, 2013
Question

SIP/TLS and SRTP support

  • March 19, 2013
  • 1 reply
  • 5509 views
Hi, A little confused at the moment - does v4 of the FortiOS (running on a 60C) support SIP/TLS and SRTP? I have a new requirement to provide these services to roaming managers, etc so looking for some insight - passing traffic to an Asterisk server behind the firewall. Thanks - Ed

    1 reply

    stephen_ren_FTNT
    Staff
    stephen_ren_FTNT
    Staff
    March 19, 2013
    As far as I know,v4 does not support it.It' s a v5.0 new feature,v5.0 supports SIP over SSL. example topo: SIP-Server(Asterisk) | FGT | Phone1 1. Create a voip profile with enable ssl as below: config voip profile edit " sip" set extended-utm-log enable config sip set log-violations enable set ssl-mode full set ssl-send-empty-frags disable set ssl-server-certificate " Fortinet_Factory" end next end 2. configure the sip port as below: FTG_200B (vdom1) # config sys setting FTG_200B (settings) # get ... sip-tcp-port : 5060 sip-udp-port : 5060 sip-ssl-port : 5061 3. Create a firewall policy in which the above voip profile is enable config firewall policy edit 1 set srcintf " port10" set dstintf " port9" set srcaddr " all" set dstaddr " all" set action accept set schedule " always" set service " ALL" set utm-status enable set voip-profile " sip" set profile-protocol-options " default" set nat enable next end
    Terms & ConditionsAccessibility statement