3cx is not working after i changed to Fortigate Firewall.

[sajeerhajib]

Hi All,
I'm not getting incoming and outgoing calls after changing the firewall. All the ports are opened as same as in the old firewall. I run the firewall test inside the 3cx application two errors are coming. Kindly advise on this matter and help me sort out the issue. Please find the attached picture for your reference

 

[leejor]

There are a number of posts, on configuring various versions of the Fortigate Firewall, on the forum, if you do a search.

https://www.3cx.com/community/threads/fortigate-sip-alg-removal-update.76234/

https://www.3cx.com/community/threads/fortigate-80f-3cx-config-guide.83616/

 

[sajeerhajib]

There are a number of posts, on configuring various versions of the Fortigate Firewall, on the forum, if you do a search.

https://www.3cx.com/community/threads/fortigate-sip-alg-removal-update.76234/

https://www.3cx.com/community/threads/fortigate-80f-3cx-config-guide.83616/

Am still also getting this error. I change all the settings in the firewall. Still, now same error is coming. Need your support

 

[YiannisH_3CX]

Hi @sajeerhajib

Is the ALG test the only one failing? If so that might not be your issue as the test fails to complete and does not mean that its necessarily and issue. Don't get me wrong you should try to fix that ASAP as well to avoid any issues there but your calls may be failing for different reasons.

Are you using an IP based or a registration based provider? Do you have remote extensions using STUN in other locations? Do those register to the PBX?

Can you reach your management console from outside the company? Is the correct public IP forwarded to your PBX?
Also what version of PBX are you using and where is it located? Can you bypass the firewall for a test to see if that's the issue?

 

[sajeerhajib]

Hi @sajeerhajib

Is the ALG test the only one failing? If so that might not be your issue as the test fails to complete and does not mean that its necessarily and issue. Don't get me wrong you should try to fix that ASPA as well to avoid any issues there but your calls may be failing for different reasons.

Are you using an IP based or a registration based provider? Do you have remote extensions using STUN in other locations? Do those register to the PBX?

Can you reach your management console from outside the company? Is the correct public IP forwarded to your PBX?
Also what version of PBX are you using and where is it located? Can you bypass the firewall for a test to see if that's the issue?

I didn't touch 3cx hosted machine. The only thing i change the firewall from SonicWall to FortiGate . The ports are opened and alloctaed to hosted machine.

 

[NicholasP_3CX]

The SIP ALG test result means that the test was incomplete. The 3CX System has not received a response back from the SIP ALG Detector server of 3CX.



This doesn't necessarily mean that SIP ALG is active on your network. It just means the test is inconclusive.

Please check from your firewall that there is no blocking of traffic to and from the SIP ALG Detector server. The hostname for this is in the test.

You can then filter your firewall logs to see if any traffic has been blocked.