Creating a phones to server policy

To create a firewall policy:

1. Go to Policy & Objects > Firewall Policy, and click Create New.
2. Set the following options, and click OK:

   Name	PHONES_to_SERVER
   Incoming Interface	VLAN60
   Outgoing Interface	VLAN50
   Source	VOIP_net
   Destination	CORP_SRV ^
   Service	VOIP *
   Schedule	Always
   Action	Accept
   NAT	NO
   Security Profiles	CORP_VOIP
   Logging Options	All Sessions

   * There are several VoIP services built in to the FortiGate. You should select the protocol(s) used by your company (for example, SIP, H323, and so on).

   ^ If you are using an external VoIP service, you must adjust the destination and outgoing interface to reflect the server location.