Make sure the policy you have that permits the SIP traffic has the specific appropriate application set in the policy and is not being swept up by some general allow any rule.
For the ALG to work you policy needs to match the voip application type so it is appropriately recognized and allows the necessary reverse traffic sessions.
↧