A nmap scan of a Fortigate Firewall showed that TCP port 8009 open is. According to knowledge base articles this is only to download the client for ssl vpn. Is this port used for anything else, and if not - how can I disable it?


According to this article:

FortiClient download portal This feature is available on FortiGate-1000A, FortiGate-3600A, and FortiGate-5005FA2 only. TCP 8009

I'd imagine this is a needed feature. If you're running scans from your internal network, this port being open is safe. Don't need it? Don't use the FortiClient.

| improve this answer | |
  • 1
    It was open externally. I don't use the client, so why would it need to be open? – user857990 Oct 23 '13 at 12:14
  • Good point...according to the KB, it's supposed to be invisible externally in the "default" configuration. I don't have a fortigate firewall to play with, but I'd imagine you can block the port with a rule. – Nathan C Oct 23 '13 at 12:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.