Skip to main content
Secucard
New Member
March 24, 2025
Question

ZTNA with SIP over TCP

  • March 24, 2025
  • 1 reply
  • 564 views

Hi,

 

I am getting serious crazy with an issue with ZTNA.

Setup: I have two Fortigate, (Site A) and a Fortigate (Site B) with an IPSEC-Tunnel between.

I know I have to work with ZTNA IP pool to reach out a destination on Site B.

I want to have port 5060 (TCP) reachable over a TCP ZTNA Setup. I know, I have to setup Endpoints on the EMS, too.

Fortigate does have FortiOS 7.2 running the latest Patch, EMS 7.4.1 on the Cloud.

 

Test: Port 3306 for MySQL: works (TCP, not encrypted)
Test: Port 22 for SSH, works
Test: SIP, TCP 5060, DOES NOT WORK

 

I already disabled the SIP helper and tried with other incoming ports, nothing works. TCP with SIP works on the local VLAN indeed.

 

If there is anyone with a good idea, I am here ;)

 

Thanks

1 reply

AEK
SuperUser
SuperUser
March 24, 2025

Hi Secucard

What do you mean by "does not work"? Do you have SIP TCP connection established but no RTP (voice)?

I find the idea of RTP over ZTNA not obvious at all, and probably not conceivable (just my opinion).

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!