Fortigate 40c SIP ALG

[Kiwisimon]

I cant seem to find out if SIP ALG is enabled on our 40c. Can only find posts that mention how to disable so does that mean it is enabled by default.? Third party phone techs are trying to set up a samsung PBX to handle SIP traffic and provider ( FXnetwork) is telling us that Firewall needs to support ALG to handle their flavour of SIP. Do we need to go to CL to enable /disable?

[Carl_Wallmark]

Hi, To enable the SIP ALG you need to create a VOIP profile and drop it on the firewall rule for SIP. If not, the FG will only use the SIP session-helper. And in some cases you need to delete that session helper: config sys session show <look for " set name SIP" > delete <number> (in my case its 13) end

[pcraponi]

Beyond delete session-helper, like said Selective, you need disable the SIP of the kernel: config system settings set sip-helper disable end This command need a fortigate reboot to take effect.... If you have a Full NAT (VIP) to your PBX, you don' t need sip-helper. The same if you have mapped all ports.... Regards, Paulo Raponi

[Carl_Wallmark]

Right! I forgot.

[Kiwisimon]

Thank you gentleman..