Fortinet FortiGate Series Administration Guide

Configuring SIP SIP support
FortiGate Version 4.0 MR1 Administration Guide
514 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
set block-invite enable
end
end
Archiving SIP communication
You can DLP archive SIP call metadata by DLP archiving session control content. You
can view the archived information on FortiAnalyzer unit or the FortiGuard Analysis and
Management Service. For more information, see “DLP archiving” on page 588.
Preserving NAT IP
In NAT operation mode, you can preserve the original source IP address in the SDP i line.
This allows the SIP server to parse this IP for billing purposes.
From the CLI, type the following commands:
config application list
edit <list_name>
config entries
edit 1
set category voip
set application SIP
set nat-trace enable
end
end
In addition, you can overwrite or append the SDP i line:
config application list
edit <list_name>
config entries
edit 1
set category voip
set application SIP
set preserve-override {enable | disable}
end
end
where selecting enable removes the original source IP address from the SDP i line and
disable appends the address.
Controlling SIP client connections
You can control the SIP client to only connect to the registrar itself. This can avoid VoIP
spoofing.
From the CLI, type the following commands:
config application list
edit <list_name>
config entries
edit 1
set category voip
set application SIP
set strict-register enable
end
end

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount