Cisco Phone not getting Registered through Fortigate IPSec VPN tunnel

[FayasSalam95]

Dear Team,

I am having a FortiGate IP sec VPN tunnel . I am connecting a cisco phone on the other side of the CUCM and TFTP servers.

I can ping the Cucm Server as well as the TFTP server through the tunnel,

Also, I am able to resolve the hostnames through the DNS servers through the tunnel.

But the phone is not getting registered.

The phone is getting an IP and the traffic is going to the TFTP Server successfully through the allowed policy.

The phone is showing DNS time out where as i could ping the DNS server.

Could someone give me hint of what is going on

[b.winter]

Maybe DNS traffic is blocked. Just because you can ping the DNS server, doesn't mean DNS traffic is allowed too.

I suggest, you check the FW logs to see, if anything related to the phone's traffic is getting blocked (maybe something else is blocked too).