Create VDOM on In Production Fortigate

[jpegnam]

We have a live Firewall and want to create a VDOM on it so we can create tunnels with the SIP ALG disabled. Is there anything we need to watch out for with this task?

[gfleming]

First of all you can probably do this without resorting to VDOM separation. Can you provide more details about what you are trying to accomplish?

As for creating a VDOM you can do this on a live FortiGate without impact. Your existing configuration will exist in the "root" VDOM. You can then create new VDOMs and configure them as needed.

https://docs.fortinet.com/document/fortigate/7.2.3/administration-guide/32293/general-configurations

[jpegnam]

We are having issues with some of our clients and having the SIP ALG Enabled on their connection. We want to create tunnels off the interfaces in the new VDOM with SIP disabled.

[gfleming]

What are the issues you are experiencing, exactly?

You may be able to leverage VOIP profiles to tweak the features of the ALG for that specific client instead of going with VDOMs.