Description
Solution
# config system settings2) Change default-voip-alg-mode to kernel-helper-based
set sip-ssl-port <port_number>
set sip-tcp-port <port1_int> [<port2_int>]>
set sip-udp-port <port_number>
set sccp-port <port_number>
end
# config system settings
set default-voip-alg-mode kernel-helper-based
end
3) Disable the ALG in the default VoIP profile which is applied even when no VoIP profile is added on the policy
# config voip profile
edit default
config sccp (for port 2000)
set status disable
end
# config voip profile
edit default
config sip (for port 5060/5061)
set status disable
end
Related Articles
SIP and SCCP Traffic is Handled by the VoIP ALG/Proxy by default in FortiOS 5.2
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.