RTP enable/disable (RTP bypass)
You can configure the SIP ALG to stop from opening RTP pinholes. Called RTP bypass, this configuration can be used when you want to apply SIP ALG features to SIP signalling messages but do not want the RTP media streams to pass through the FortiGate unit. The FortiGate unit only acts as a signalling firewall and RTP media session bypass the FortiGate unit and no pinholes need to be created.
Enter the following command to enable RTP bypass in a VoIP profile by disabling opening RTP pinholes:
config voip profile edit VoIP_Pro_1
config sip
set rtp disable end
end