Fortigate SIP ALG Removal Update

[AverageAs]

Hello All

Just an update to an old thread I had done for newer versions of firmware. Caught me out the other day.

To Disable SIP ALG follow the below steps

Backup your firewall config first!

For FortiOS 6.2.2 and above

config system settings
set sip-expectation disable
set sip-nat-trace disable
set default-voip-alg-mode kernel-helper-based
end

For FortiOS below 6.2.2 ( 6.2.0 down to 5.2.0 )

config system settings
set sip-helper disable
set sip-nat-trace disable
set default-voip-alg-mode kernel-helper-based
end

The rest is the same as I previously posted

Locate SIP entry in session-helper list and remove it

config system session-helper
show

Look for the entry SIP (normally 13) SIP, If found enter the below command

delete 13
end

Next disable processing of the RTP Protocol

config voip profile
edit default
config sip
set rtp disable
end
end

Once complete it is best to reboot the router to clear sessions on the 5060 protocol.

If you are having issues with phones registering reboot both firewall and the phones.