We are in the process of implementing a recording system to record calls on certain Yealink IP phones (this is not a FortiVoice IP phone system). Our network is an HA pair of Fortigates that manage all of the switches via Fortilink. We have 5 phones connected to 3 different switches that we need to record. I have setup the ERSPAN in the switch-controller of the FortiGates and it is forwarding the traffic as needed, but the recording product does not like the additional header information that ERSPAN is placing on each packet. Is there a better way to do this?
Hi jdjackson,
if that is not an emergency / temporary recording need, then I would vote for more traditional way of doing so.
Which is on PBX which then enforces RTP passing through itself (PBX) via SDP media headers, and so recording is done on PBX. Or, those SDP media headers simply points out to another multimedia endpoint which will be dedicated recorder device.
It is more of config, and also detectable if anyone has a peak into SIP/SDP headers.
So not sufficient for sneaky recording, which is prohibited in Europe and might be same in other countries (check your local law).
Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff
User | Count |
---|---|
2074 | |
1176 | |
770 | |
450 | |
344 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.