FortiAuthenticator Open Ports

Incoming Ports
Purpose		Protocol/Port
FortiClient	SSO Mobility Agent, FSSO	TCP/8001
FortiGate	LDAP, PKI Authentication	TCP or UDP/389
	RADIUS	UDP/1812
	FSSO	TCP/8000
Others	SSH CLI	TCP/22
	Telnet	TCP/23
	HTTP & SCEP	TCP/80
	SNMP Poll	UDP/161
	Web Admin	TCP/80, TCP/443
	LDAP	TCP/389
	LDAPS	TCP/636
	RADIUS	UDP/1812, UDP/1813
	OCSP	TCP/2560
3rd-Party Servers	FSSO & Tiers	TCP/8002, TCP/8003

 

Outgoing Ports
Purpose		Protocol/Port
FortiGate	RADIUS	UDP/1812
	FSSO	TCP/8000
FortiGuard	AV/IPS Updates	TCP/443
	Virus Sample	TCP/25
	SMS, FTM, Licensing, Policy Override Authentication, URL/AS Updates	TCP/443
	Registration	TCP/80
3rd-Party Servers	SMTP, Alerts, Virus Sample	TCP/25
	DNS	UDP/52
	Windows AD	TCP/88
	NTP	UDP/123
	LDAP	TCP or UDP389
	Domain Control	TCP/445
	LDAPS	TCP/636
	FSSO & Tiers	TCP/8002, TCP/8003