Required ports

The following ports must be allowed between the Client operating system and the specified system:

Port	Destination	Description
TCP/443	FortiAuthenticator	Used by FortiAuthenticator Agent for Microsoft Windows to validate the entered Two-Factor Authentication Token.
TCP/389	Windows Domain Controller	Indirectly used by FortiAuthenticator Agent for Microsoft Windows to verify group membership of the user in order to identify if Two-Factor Authentication should be applied.