

Note: In this example, “Any External” is used, therefore any host can establish a connection on the public IP Address of the PBX. The Firewall policy should look like the screenshot below: The SNAT created previously, will be listed (in this example “ VANTACT_SNAT”). Under the drop-down menu select “Static NAT”ġ2. Under the drop-down menu select “Any External” and “OK”ġ0. “Single Port” or “Port Range” can be selected. Use the “Add” button below the “Protocols” to add a custom list of ports which shall be allowed to connect to the PBX. For more information, see Enable or Disable IPS for a Policy. It can support both the SIP Registrar and the SIP Proxy when used with a call management system that is external to the Firebox. The WatchGuard SIP-ALG supports SIP trunks. After this is complete, replace the Actiontec with a known good device. The WatchGuard SIP-ALG opens and closes the ports necessary for SIP to operate. ONT port should be enabled on Fios unit and Actiontec removed from network. Solution: Device does not have configurable options for the phones beyond low/medium/high firewall options.
#Watchguard sip alg disable registration#
In this example the name “VANTACT_Ports” is given to the “Policy Template”ĥ. Symptom : Call quality and device registration issues. As a “Policy Type” select “Custom” and click “Add.”Ĥ. In this example the name “VANTACT_Services” is given to the Policy Name.ģ. Navigate under Firebox® > Firewall > Firewall Policies and click “Add Policy”Ģ. Step 2: Create Firewall Policy After setting up the static NAT, a Firewall Policy must be configured:ġ. Click “Save” and the SNAT Policy is now active. Enter the Internal/Private IP address of the PBX and click OK (in this example the internal/private IP of PBX is 192.168.4.40).ħ. The default user is 'admin' and the default pass is 'password'. In this example the external IP of the device is 192.168.3.55 which should be used to NAT inbound trac to the PBX.Ħ. Select the “External Static IP” under the drop-down menu.

In this example the name “VANTACT_SNAT” is given to the SNAT Policy.ĥ. Navigate under Firebox® UI > Firewall > SNAT and click “Add”Ģ. You can verify if your router is SIP ALG ENABLED by downloading and running our SIP ALG TESTER Programįirst, the Static NAT must be configured in order to forward the incoming traffic from the Static Public IP, to the local IP of the PBX:ġ.
