Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if not - how can I disable it?

share|improve this question

According to this article:

FortiClient download portal This feature is available on FortiGate-1000A, FortiGate-3600A, and FortiGate-5005FA2 only. TCP 8009

I'd imagine this is a needed feature. If you're running scans from your internal network, this port being open is safe. Don't need it? Don't use the FortiClient.

share|improve this answer
It was open externally. I don't use the client, so why would it need to be open? – user857990 Oct 23 '13 at 12:14
Good point...according to the KB, it's supposed to be invisible externally in the "default" configuration. I don't have a fortigate firewall to play with, but I'd imagine you can block the port with a rule. – Nathan C Oct 23 '13 at 12:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.