Description |
This article describes how to apply VoIP profile where SIP inspection is not required for specific traffic crossing IPv4 policy.
The latest FortiGate versions have by default VoIP SIP ALG enabled globally and sometimes the FortiGate needs to handle more than one VoIP solutions where one solution will need SIP ALG active and other VoIP solutions will not be required.
FortiGate config by default:
# config system settings
But if needed specific traffic does not have SIP ALG inspection active, It is not possible to accomplish by adding a VoIP profile at a specific IPv4 policy.
1) Create VoIP profile with no SIP inspection by CLI:
# config voip profile
2) Assign such VoIP profile to the policy desired:
By CLI:
# config firewall policy
Note: Enable VoIP feature from System -> Feature Visibility -> VoIP.
|
Scope | FortiGate. |
Solution |
Having VoIP profiles where one has SIP ALG disabled, allows one to decide which traffic needs SIP inspection and which does not at the policy level.
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.