Appendix D: Port Numbers

Communications between the FortiDDoS-F appliance, clients, servers, and FortiGuard Distribution Network (FDN) require that any routers and firewalls between them permit specific protocols and port numbers.

The following tables list the default port assignments used by FortiDDoS-F.

Default ports used by FortiDDoS-F for incoming traffic (listening)

Port Number	Protocol / Service	Purpose
N/A	ICMP	ping and traceroute responses.
22	TCP	SSH administrative CLI access.
23	TCP	Telnet administrative CLI access.
80	TCP	HTTP administrative web UI access.
161	UDP	SNMP queries.
443	TCP	HTTPS administrative web UI access FortiDDoS REST API Cloud Signaling REST API
6065	UDP	HA heartbeat. Multicast.
6066	UDP	HA configuration synchronization. Multicast.

Default ports used by FortiDDoS-F for outgoing traffic

Port Number	Protocol / Service	Purpose
20, 21	TCP	FTP client.
25	TCP	SMTP for alert email.
49	TCP	TACAS+
53	UDP	DNS client.
69	UDP	TFTP client for backups, restoration, and firmware updates. See commands such as execute backup or execute restore.
123	UDP	NTP client.
162	UDP	SNMP traps.
389	TCP	LDAP authentication.
443	TCP	FortiGuard polling and update downloads. FortiDDoS REST API. Cloud Signaling REST API.
514	UDP	Syslog.
1812	TCP	RADIUS authentication.
6055	UDP	HA heartbeat. Multicast.
6056	UDP	HA configuration synchronization. Multicast.