Fortigate 200E Firewall

[KhaledQuenawy]

i have 3 wan fiber connected to Fortigate 200E Firewall ( 1 have 6 static ip .. and the other 2 wan have Dynamic ip ) so now i create port forwarding on the firewall and ( by the way when try to make port forward for 5060 and 5090 there is no option to make it TCP/UDP in same time ... so for each port i make 2 rule .. first for 5060 udp and second for 5060 tcp and same for 5090 (IS THIS RIGHT ??) another thing after i make port forwarding ( should i have to make static nat from the 3CX private ip (192.168.1.30 ) to only 1 static public ip (37.220.34.4 ) or it is not important ( because when i install 3CX it detect that the public ip is one of my dynamic ip so i choose that i want to type public ip manually .. then i type 37.220.34.4 as it is public static ip .. so is this right ... ... because after all of this when i make firewall checker ... some times it pass and some time it fail with port 5090 .. and some time it fail for all port from 9000 to 10999 ... i don't know how this firewall checker work exactly .. and when it fail in same time i can access my 3CX MC from outside LAN ...????????????????????????????//

 

[eddv123]

Here are some Fortigate related pages:

https://www.3cx.com/docs/fortigate-firewall-configuration/
https://forum.fortinet.com/tm.aspx?m=144938

Primarily all your RTP traffic by default will be using UDP, although not set (and not required for port forwarding as standard) TCP is more friendly when it comes to firewalls (due to the 3 way handshake ports are left open).

Please also review this page here:
https://www.3cx.com/docs/ports/

This will give you the ports required for 3CX. I am going to assume although not specifically stated that your PBX is on premise (behind the firewall).