Nice setup Grandstream handles IP-auth trunks well. Just make sure Fortinet allows SIP/RTP and SIP ALG is disabled. If you want, I can walk you through the exact trunk and firewall settings to get inbound and outbound working cleanly. Let's discuss privately..