Appendix B: Port Numbers

Communications between the FortiADC system, clients, servers, and FortiGuard Distribution Network (FDN) require that any routers and firewalls between them permit specific protocols and port numbers.

Default ports used by FortiADC for outgoing traffic and Default ports used by FortiADC for incoming traffic (listening) list the default port assignments that FortiADC uses for outgoing and incoming traffic, respectively.

Default ports used by FortiADC for outgoing traffic

Port Number	Protocol	Purpose
N/A	ARP	HA failover of network interfaces.
N/A	ICMP	Server health checks. execute ping and execute traceroute.
25	TCP	SMTP for alert email.
53	UDP	DNS queries.
69	UDP	TFTP for backups, restoration, and firmware updates. See commands such as execute backup or execute restore.
80	TCP	Server health checks.
123	UDP	NTP synchronization.
162	UDP	SNMP traps.
389	TCP	LDAP authentication queries.
443	TCP	FortiGuard polling. Server health checks.
514	UDP	Syslog.
6055	UDP	HA heartbeat. Layer 2 multicast.
6056	UDP	HA configuration synchronization. Layer 2 multicast.

Default ports used by FortiADC for incoming traffic (listening)

Port Number	Protocol	Purpose
N/A	ICMP	ping and traceroute responses.
22	TCP	SSH administrative CLI access.
23	TCP	Telnet administrative CLI access.
53	UDP	DNS queries from clients for global load balancing and inbound link load balancing.
80	TCP	HTTP administrative web UI access. Predefined HTTP service. Only occurs if the service is used by a virtual server.
161	UDP	SNMP queries.
443	TCP	HTTPS administrative web UI access. Only occurs if the destination address is a network interface’s IP address. Predefined HTTPS service. Only occurs if the service is used by a virtual server, and if the destination address is a virtual server.
6055	UDP	HA heartbeat. Layer 2 multicast.
6056	UDP	HA configuration synchronization. Layer 2 multicast.