{"id":2094,"date":"2022-07-05T17:13:12","date_gmt":"2022-07-05T21:13:12","guid":{"rendered":"https:\/\/increasec.com\/?p=2094"},"modified":"2022-12-12T10:41:13","modified_gmt":"2022-12-12T15:41:13","slug":"howto-disable-sip-voip-helper-alg-on-fortigate","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=2094","title":{"rendered":"HowTo Disable SIP\/VOIP helper\/alg on Fortigate"},"content":{"rendered":"\n

Disabling SIP ALG<\/h1>\n\n\n\n
\n\n\n\n
    \n
  1. Open the CLI interface for your Fortigate Firewall\n
      \n
    1. Before making any changes be sure to backup your configuration<\/li>\n<\/ol>\n<\/li>\n\n\n\n
    2. In the CLI enter the following commands\n
        \n
      1. Use the following commands for a device on FortiOS <\/strong>starting at 6.2.2<\/strong><\/li>\n\n\n\n
      2. config system settings<\/code><\/li>\n\n\n\n
      3. set sip-expectation disable<\/code><\/li>\n\n\n\n
      4. set sip-nat-trace disable<\/code><\/li>\n\n\n\n
      5. set default-voip-alg-mode kernel-helper-based<\/code><\/li>\n\n\n\n
      6. end<\/code><\/li>\n<\/ol>\n<\/li>\n\n\n\n
      7. For devices below\u00a0FortiOS<\/strong>\u00a0version\u00a06.2.2<\/strong>\u00a0use the following commands\n
          \n
        1. config system settings<\/code><\/li>\n\n\n\n
        2. set sip-helper disable<\/code><\/li>\n\n\n\n
        3. set sip-nat-trace disable<\/code><\/li>\n\n\n\n
        4. set default-voip-alg-mode kernel-helper-based<\/code><\/li>\n\n\n\n
        5. end<\/code><\/code><\/li>\n<\/ol>\n<\/li>\n\n\n\n
        6. If you encounter and error while entering set default-voip-alg-mode kernel-helper-based<\/code> go ahead and ignore it<\/li>\n\n\n\n
        7. The rest of the configuration will be the same for all FortiOS versions<\/li>\n\n\n\n
        8. Run the following commands\n
            \n
          1. config system session-helper<\/code><\/li>\n\n\n\n
          2. show <\/code>\n
              \n
            1. Here you will want to find the entry for SIP<\/strong>, this is typically 12<\/strong> but it may differ depending on software version and model<\/li>\n<\/ol>\n<\/li>\n\n\n\n
            2. delete <\/code>12<\/code><\/strong>\n
                \n
              1.  Alternatively use the entry you found in the previous step<\/li>\n<\/ol>\n<\/li>\n\n\n\n
              2. end<\/code><\/li>\n<\/ol>\n<\/li>\n\n\n\n
              3. Enter the following commands in the CLI to disable RTP processing\n
                  \n
                1. config voip profile<\/code><\/li>\n\n\n\n
                2. edit default<\/code><\/li>\n\n\n\n
                3. config sip<\/code><\/li>\n\n\n\n
                4. set rtp disable<\/code><\/li>\n\n\n\n
                5. end<\/code><\/li>\n\n\n\n
                6. end<\/code><\/li>\n<\/ol>\n<\/li>\n\n\n\n
                7. Once done go ahead and reboot the device, Fortigate firewalls do not require a reboot when you change configuration but in this case, we will need the reboot to activate the session helper changes<\/li>\n\n\n\n
                8. Lastly, reboot all of your SIP Devices\/Phones<\/li>\n<\/ol>\n\n\n\n

                  <\/p>\n\n\n\n

                  <\/p>\n\n\n\n

                  see here https:\/\/voipdocs.io\/en\/articles\/316-disabling-sip-alg-on-a-fortigate-firewall<\/p>\n","protected":false},"excerpt":{"rendered":"

                  Disabling SIP ALG see here https:\/\/voipdocs.io\/en\/articles\/316-disabling-sip-alg-on-a-fortigate-firewall<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[198,1],"tags":[87,119],"class_list":["post-2094","post","type-post","status-publish","format-standard","hentry","category-blueteam","category-uncategorised","tag-fortigate","tag-voip"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2094","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2094"}],"version-history":[{"count":2,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2094\/revisions"}],"predecessor-version":[{"id":2317,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2094\/revisions\/2317"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2094"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2094"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2094"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}