Required ports

The following ports must be allowed between the Client operating system and the specified system:

Port	Destination	Description
TCP/443	FortiAuthenticator	Used by the FortiAuthenticator Agent for Microsoft OWA to validate the entered two-factor authentication token.
TCP/389	Windows Domain Controller	Indirectly used by the FortiAuthenticator Agent for Microsoft OWA to verify group membership of the user in order to identify if two-factor authentication should be applied.