How to Disable SIP ALG on Fortinet / FortiGate

How to Disable SIP ALG on Fortinet / FortiGate

How to Disable SIP ALG on Fortinet / FortiGate

SIP ALG is used to try and avoid configuring Static NAT on a router. Its implementation, however, varies from one router to another, often making it difficult to inter-operate a router with SIP ALG enabled with a PBX. In general, you would want to disable SIP ALG and configure one to one port mapping on the router.

In this article, we will show you how to disable SIP ALG on FortiGate. On devices running FortiOs, you will need to disable this in multiple places as shown below.


1. Open the Fortigate CLI from the dashboard


2. Enter the following commands in FortiGate’s CLIconfig system settings

set sip-helper disable
set sip-nat-trace disable
reboot the device


3. Reopen CLI and enter the following commands (do not enter the text after //)config system session-helper

show    //you need to find the entry for SIP, usually 12, but can vary
delete 12     //or the number that you identified from the previous command


4. Disable RTP processing as follows:config voip profile

edit default
config sip
set rtp disable

There might be other settings that you need to configure depending on the FortiOS version that you are using. If you continue encountering issues related to SIP ALG, please contact Fortinet Support.

    • Related Articles

    • Disable SIP ALG in Cyberoam

      SIP support in Cyberoam Applicable Version: 10.00 onwards Cyberoam supports Session Initiation Protocol (SIP) for multimedia communication such as VoIP. Cyberoam SIP Module is enabled by default and provides the following functionalities for SIP ...

    • How to Disable SIP ALG on a Mikrotik

      SIP ALG Explained Many of today's commercial routers implement SIP ALG (Application-level gateway), coming with this feature enabled by default. While ALG could help in solving NAT related problems, the fact is that many routers' ALG implementations ...

    • How to turn off Netopia 3000 (SIP ALG) off

      How to turn off Netopia 3000 (SIP ALG) off to have your DSL setup work with VOIP systems. *Netopia has SIP Passthrough "on" by default. (Or SIP ALG in newer models) In order to work with 3NG Networks, you must turn SIP Passthrough (SIP ALG) off. The ...

    • How to Disable SIP ALG on TP-Link ADSL modem router

      Download doc here

    • List of Incompatible Devices (Routers/Firewalls)

      Incompatible Devices Actiontec GT704WG Current Status:Not Compatible Recommendation:Replace device Comments: This router is not SIP Compatible. Drops calls after 20 seconds. Asus RT-N66U Current Status:Not Compatible Recommendation:Replace device ...