From the Fortinet Appliance Command Line Interface

Remove SIP Helper

1. In the Command Line Interface (CLI) run the following commands:
   • config system session-helper
   • show
      
2. Notice that edit 13 contains SIP:
   
    
3. Enter the following commands:
   • delete 13
   • end

Disable SIP-ALG

In the Command Line Interface (CLI) run the following commands:

• config system settings
• set default-voip-alg-mode kernel-helper-based
• set sip-helper disable
• set sip-nat-trace disable
• end

Disable Strict Register

Strict Register forces VoIP devices through a pinhole at port 65476 and will cause duplicate porting to occur.

To disable this setting, run the following command in the Command Line Interface (CLI):

• config voip profile
• edit <Profile_name>
• config sip
• set strict-register disable
• end

From the Fortinet Appliance GUI / UX

Enable Traffic Shaping

1. Go to SYSTEM > FEATURE VISIBILITY
    
2. Enable Traffic Shaping and VoIP under the ADDITIONAL FEATURES column like so:
   
    
3. Left single mouse-click APPLY to finalize the changes.
    

Set Inspection Mode to Proxy

1. Go to SYSTEM > SETTINGS and scroll down to almost the bottom of the page.
    
2. Look for the option Inspection Mode and left single mouse-click on the option PROXY (this allows you to build VoIP proxies):
   
    
3. Left single mouse-click APPLY to finalize the changes made.
    

Create a VoIP Traffic Shaper

1. Left single mouse-click on CREATE NEW
   
    
2. Fill in the information and enable the settings as shown above.
    
3. Left single mouse-click on OK to finalize the changes.
    

Create  Primecall VoIP Addresses, Services, and Address Groups

Addresses

1. Navigate to POLICY AND OBJECTS > ADDRESSES and perform the following steps for each of the Primecall VoIP IP Public Subnets referenced above.
    
2. Left single mouse-click on CREATE NEW > ADDRESS
   
    
3. Give the Address a name. (It is suggested to use a descriptive name such as the one used in this example)
   
    
4. Fill in the SUBNET / IP RANGE with ONE of the addresses.
    
5. Left single mouse-click OK
   
    

Address Group

1. Navigate to POLICY AND OBJECTS > ADDRESSES and perform the following:
2. Left single mouse-click on CREATE NEW > ADDRESS Group
3. Give the Address Group a name. (It is suggested to use a descriptive name such as the one used in this example)
4. Left single mouse-click the + sign under the Members object.
5. Left single mouse-click on each of the Primecall VOIP Address Objects you created in the previous step.
6. Once you have selected all of the addresses look for the Close button at the bottom of the Select Entries and left single mouse-click.
    

Services/Ports

1. Navigate to SERVICES
    
2. Left single mouse-click on CREATE NEW > SERVICE
   
    
3. Give the Service a name. (It is suggested to use a descriptive name such as the one used in this example)
   
4. Set the PROTOCOL TYPE as shown above.
    
5. Ensure the ADDRESS is set for IP RANGE.
    
6. Select the appropriate port type.
   
   • Fill in the appropriate port information for each port described under Ports - Primecall Platform & Ports - Enswitch 1 and 2 Platforms.
   • Fill in the SUBNET / IP RANGE with ONE of the addresses.
   • Left single mouse-click OK
     
      

Create an IPv4 Policy for Primecall

• Navigate to POLICY AND OBJECTS > IPv4 POLICY
   
• Left single mouse-click on CREATE NEW:
  
   
• Give the Policy a name. (It is suggested to use a descriptive name such as the one used in this example)
  
• Configure settings as shown above. NOTE: You may use a different name for the internal connection depending on how your device is configured. Use the appropriate LAN connection for your configuration.
   
• Ensure the policy is active or turn it on once you apply the settings.
   
• Left single mouse-click OK
   

Set the Register, Invite, and SCCP Request Limits

1. Navigate to SECURITY PROFILES > VoIP
   
    
2. Set the “REGISTER” Requests Limit and “INVITE” Requests Limit to the value specified by your installation technician.
   • 300 can be used if the exact value is not known.
      
3. If necessary, set the SCCP limit as well. 
    

Create and Edit a Traffic Shaping Policy

1. Navigate to TRAFFIC SHAPING POLICY
   
    
2. Select CREATE NEW to show the menu for configuring the policy:
   
    
3. Complete the policy as shown above.