VoIP call issues over site-to-site VPN or with IPS configured

Resolve issues with VoIP call quality when there is a site-to-site VPN or IPS configured on XG Firewall.


When there is a site-to-site VPN or IPS, or both configured in the XG Firewall, do as follows to resolve issues with VoIP calls dropping or poor quality calls:


  1. Type: set ips sip_preproc disable

    This will disable the preloaded IPS patterns for SIP.

  2. Type: set vpn conn-remove-tunnel-up disable

    When disabled, XG Firewall will not flush the connections when IPsec tunnels come up.