Disabling SIP ALG on Fortigate

Disabling SIP ALG

  • Open the CLI interface for your Fortigate Firewall
    1. Before making any changes be sure to backup your configuration
  • In the CLI enter the following commands 
    1. Use the following commands for a device on FortiOS starting at 6.2.2
    2. config system settings
    3. set sip-expectation disable
    4. set sip-nat-trace disable
    5. set default-voip-alg-mode kernel-helper-based
    6. end
  • For devices below FortiOS version 6.2.2 use the following commands
    1. config system settings
    2. set sip-helper disable
    3. set sip-nat-trace disable
    4. set default-voip-alg-mode kernel-helper-based
    5. end

  • Reference: https://voipdocs.io/en/articles/316-disabling-sip-alg-on-a-fortigate-firewall