This configuration example shows how to configure the FortiGate unit to support the destination address translation scenario shown in Figure 297. The FortiGate unit requires two SIP security policies:
• A destination NAT security policy that allows SIP messages to be sent from the Internet to the private network. This policy must include destination NAT because the addresses on the private network are not routable on the Internet.
• A source NAT security policy that allows SIP messages to be sent from the private network to the Internet.
Figure 297: SIP destination NAT scenario part two: 200 OK returned to Phone B and media streams established
