To disable SIP ALG, the steps depend on your router/firewall model. Here are instructions for the most common devices. If you tell me your router/firewall model, I’ll give the exact commands. ✅ Disable SIP ALG on Popular Devices 1. FortiGate Firewall You previously mentioned you use a FortiGate 60E, so here are the correct steps: GUI
Go to System > Feature Visibility
Enable VoIP (if not visible already)
Then go to Policy & Objects > VoIP
Set SIP ALG = Disabled
CLI Run these commands: config system settings set default-voip-alg-mode kernel-helper-based set sip-nat-trace disable set sip-expectation disabled set sip-heuristic disable end
config system session-helper show Find the SIP helper entry (usually ID 13) and then: config system session-helper delete 13 end Then disable the helper in session inspection: config firewall policy edit <your-policy-id> set voip-profile "default" end 2. MikroTik Router /ip firewall service-port set sip disabled=yes 3. TP-Link Router Often found under: Advanced > NAT Forwarding > ALG > Disable SIP ALG 4. Netgear Router Advanced > Setup > WAN Setup > Disable SIP ALG 5. Asus Router Advanced Settings > WAN > NAT Passthrough > SIP Passthrough = Disable 6. Cisco IOS no ip nat service sip udp port 5060 7. Ubiquiti UniFi (UDM/USG) Unifi Controller: Settings → Firewall → Advanced Disable: