FortiGate 100

[MACC the AVCOtek]

Aloha everybody!

It's great that VTCtalk is back....because now I can ask questions like this:

Does anybody know what ports to open to allow return video packets through a FortiNet FortiGate 100?

Outgoing video packets are fine; incoming packets are being blocked resulting in blue video.

Endpoints affected are Polycom 128 and Aethra Maia.


Mahalo, in advance!

[StianS]

Hi,

You should use the H.323 ALG (service) in your firewall. Otherwise you could open all the H.323 ports (TCP/UDP 1024-65535) both in and outgoing. Be aware that if you're using NAT you have to map this ports to the local IP which the videosystem is using (you could also use a fewer incoming ports if using fixed ports on a Plcm endpoint). NOT use fixed ports if you are using the H.323 ALG. If using static ports, make sure that the firewall's H.323 ALG is disabled.

Regards
Stian