FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Anonymous
Not applicable
Article Id 214048
Description

This article talks about a workaround that can help solve the issue with WhatsApp video calling/voice calling when ISDB is used.

Scope

FortiGate, 7.0.x.

Solution

Allowing the users behind the FortiGate to perform WhatsApp video calls/voice calls can be tricky sometimes, as the ports used for calling varies. FortiGate has an Internet database option that can be used as a destination for a granular outcome.

 

Given that there is a firewall policy that allows WhatsApp calling traffic with destination ISDB – ‘Meta-WhatsApp’ as shown in the below image.

 

WhatsApp_I.JPG

Despite the above policy, there could be some issues with WhatsApp calling (both video and voice). Meta edge servers are used by WhatsApp calls via VoIP STUN service (port 3478). Since these servers are widely used by other Meta services, can’t be moved to the Meta-WhatsApp object.

In such case try adding ISDB-‘Meta-Other’ to the existing policy.

 

WhatsApp_II.JPG

Note: Make sure the ports specified in the below article are allowed as a prerequisite:

Technical Note: WhatsApp Voice Call is not working when connected to FortiGate.

Contributors