Chapter 3 Authentication for FortiOS 5.0 : Agent-based FSSO : Configuring the FSSO Collector agent for Windows AD : Configuring FSSO ports : Configuring ports on the Collector agent computer
  
Configuring ports on the Collector agent computer
On the computer where you install the Collector agent, you must make sure that the firewall does not block the listening ports for the FortiGate unit and the DC Agent. By default, these are TCP port 8000 and UDP port 8002. For more information about setting these ports, see “Configuring Collector agent settings”.