Outgoing ports
|
|
Purpose |
Protocol/Port |
|---|---|---|
|
FortiAnalyzer |
Syslog, OFTP, Registration, Quarantine, Log & Report |
TCP/514 |
|
FortiAuthenticator |
LDAP, PKI Authentication |
TCP or UDP/389 |
|
RADIUS |
UDP/1812 |
|
|
FSSO |
TCP/8000 |
|
|
RADIUS Accounting |
UDP/1813 |
|
|
SCEP |
TCP/80, TCP/443 |
|
|
CRL Download |
TCP/80 |
|
|
External Captive Portal |
TCP/443 |
|
|
FortiProxy |
HA Heartbeat |
ETH Layer 0x8890, 0x8891, and 0x8893 |
|
HA Synchronization |
TCP/703, UDP/703 |
|
|
Unicast Heartbeat for Azure |
UDP/730 |
|
|
DNS for Azure |
UDP/53 |
|
|
WAN optimization tunnels |
TCP/7810 |
|
|
FortiGuard |
AV/IPS Update |
TCP/443, TCP/8890 |
|
Cloud App DB |
TCP/9582 |
|
|
FortiGuard Queries |
UDP/53, UDP/8888, TCP/53, TCP/8888, TCP/443 (as part of Anycast servers) |
|
|
SDNS queries for DNS Filter |
UDP/53, TCP/853 (as part of Anycast servers) |
|
|
Registration |
TCP/80 |
|
|
Alert Email, Virus Sample |
TCP/25 |
|
|
Management, Firmware, SMS, FTM, Licensing, Policy Override |
TCP/443 |
|
|
Central Management, Analysis |
TCP/541 |
|
|
FortiManager |
IPv4 FGFM management |
TCP/541 |
|
IPv6 FGFM management |
TCP/542 |
|
|
Log & Report |
TCP or UDP/514 |
|
|
FortiGuard Queries |
UDP/53, UDP/8888, TCP/80, TCP/8888 |
|
|
FortiSandbox |
OFTP |
TCP/514 |
|
Others |
FSSO |
TCP/8001 (by default; this port can be customized) |
|
While a proxy is configured, FortiProxy uses the following URLs to access the FortiGuard Distribution Network (FDN):
|