Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if not - how can I disable it?

share|improve this question
add comment

1 Answer

According to this article:

FortiClient download portal This feature is available on FortiGate-1000A, FortiGate-3600A, and FortiGate-5005FA2 only. TCP 8009

I'd imagine this is a needed feature. If you're running scans from your internal network, this port being open is safe. Don't need it? Don't use the FortiClient.

share|improve this answer
    
It was open externally. I don't use the client, so why would it need to be open? –  user857990 Oct 23 '13 at 12:14
    
Good point...according to the KB, it's supposed to be invisible externally in the "default" configuration. I don't have a fortigate firewall to play with, but I'd imagine you can block the port with a rule. –  Nathan C Oct 23 '13 at 12:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.