How to port forward SIP Server for VOIP?

First of all, Web Access Port 8085 should work fine with a DNAT Rule ( Business Application Rule).

https://community.sophos.com/kb/en-us/122976

Can you share a Screenshot of this rule? 

I am not quite the "pro" in VOIP Traffic. But a DNAT Rule in XG can include multiple service ranges. 

So this should also be possible, but i have a big security issue in my head about this. I guess, you should contact your VOIP Provider, if this is the "Correct" approach. 

XG is not a SBC. https://en.wikipedia.org/wiki/Session_border_controller 

There is a KBA about VOIP: https://community.sophos.com/kb/en-us/127785

Already talked to the VOIP provider and the only thing we need to do is open those ports which I've done.

You can also see the screenshot of the rule above.

Hi,

would you like to try an experiment?

Make an outgoing rule that is source LAN, PABX, destination WAN, SIP provider, allow 5060, 5061 and your additional port range, log, MASQ.

See if that allows outgoing and incoming traffic?

Ian

Hi,

would you like to try an experiment?

Make an outgoing rule that is source LAN, PABX, destination WAN, SIP provider, allow 5060, 5061 and your additional port range, log, MASQ.

See if that allows outgoing and incoming traffic?

Ian

Yeah, tried that but not working.

Hi,

sounds like you have some missing ports in your configuration. Try changing the rule to source LAN, PABX, destination Wan, ANY, allow all, log. Then check what ports are being used in log viewer using a filter on  the rule number.

Ian

Issue resolved.

My configuration was just fine.

I just found out lately that my other ISP was having connection problem.

My first configuration was fine. I opened port 8085 for my web access,

port 5060 for voice, then RTP port range 10000-12000.

All of opened ports were configured for both TCP and UDP transmissions.