FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
maulishshah
Staff
Staff
Article Id 296365

Description

 

This article describes how to view VoIP profiles in UTM features of the GUI.

 

Scope

 

FortiOS 7.0+.

 

Solution

 

By default, the firewall policies are set to operate in Flow-based inspection mode and the VOIP profiles (through SIP-ALG) are a proxy-based feature.

 

Due to this reason, the firewall will not display the default VoIP profiles (proxy-based) in a flow-based policy.

The option exists and allows the selection of profiles because additional VOIP profiles can be created for flow-mode inspection (for specific usage). 

 

Here is the reference image: 

 

VOIP_missing.PNG

 

Note: 

If it is not possible to see the 'VoIP' profile option at all in the Firewall Policy, then check and enable 'VoIP' from the System Feature Visibility first.

If the Firewall Policy is moved from Flow-based to Proxy-mode inspection, it is possible to see the default, pre-existing VoIP profiles.

 

Refer to the following image: 

 

Profile_Visiblew.PNG

 

VoIP profile can be set through CLI using the below command:


config firewall policy
    edit <Policy_ID>
        set set inspection-mode proxy
        set voip-profile <Profile_name>
end