Disable SIP ALG in firewall

what is sip alg? sip alg stands for application layer gateway and is common in many commercial routers its purpose is to prevent some of the problems caused by router firewalls by inspecting voip traffic (packets) and modifying it where necessary many routers have sip alg turned on by default there are various solutions for sip clients behind nat — some on the client side (stun, turn, ice), and others on the server side (proxy rtp solutions such as rtpproxy or mediaproxy) generally speaking, alg typically works on the client side lan router or gateway in some scenarios, client side solutions are not valid — for example, stun with a symmetrical nat router if the sip proxy does not provide a server side nat solution, then an alg solution may have a place an alg understands the protocol used by the specific applications it supports (in this case sip) and performs deep packet inspection of traffic passing through it a nat router with a built in sip alg can rewrite information within sip messages (sip headers and sdp body), making signaling and audio traffic between the client behind nat and the sip endpoint possible how can it affect voip? even though sip alg is intended to assist users who have phones on private ip addresses (class c 192 168 x x), in many cases it is poorly implemented and actually causes more problems than it solves sip alg modifies sip packets in unexpected ways, corrupting them and making them unreadable this can result in unexpected behavior, such as phones failing to register and incoming calls not connecting therefore, if you are experiencing problems, we recommend checking your router settings and disabling sip alg if it is enabled