FortiMail Open Ports

FortiMail Open Ports

FortiMail Open Ports

Incoming Ports

Purpose

Protocol/Port
Email Client Quarantine View/Retrieve TCP/80 or TCP/443 or TCP/110
SMTP or SMTPS TCP/25 or TCP/465
POP3 or POP3S TCP/110 or TCP/995 (server mode only)
IMAP or IMAPS TCP/143 or TCP/993 (server mode only)
FortiManager Config/Firmware Push TCP/22
SNMP Poll TCP/161
FortiGuard AV Push UDP/9443
External Email Server SMTP or SMTPS TCP/25 or 465
Protected Email Server SMTP or SMTPS TCP/25 or 465
Outgoing Ports

Purpose

Protocol/Port
FortiAnalyzer Syslog UDP/514
FortiManager Reg, Config Backup, Config/Firmware

Pull

TCP/443
SNMP Traps UDP/162
FortiGuard AS Rating UDP/53
AV/AS Update TCP/443
External

Email Server

SMTP or SMTPS TCP/25 or TCP/465
Protected Email Server SMTP or SMTPS TCP/25 or TCP/465
POP3 Auth TCP/110
IMAP Auth TCP/143

FortiMail Open Ports

Outgoing Ports

Purpose

Protocol/Port
Others Dyn DNS TCP/80 etc.
DNS, RBL UDP/53
NTP UDP/123
Alert Email TCP/25
LDAP or LDAPS TCP/389 or TCP/636
RADIUS Auth TCP/1812
NAS TCP/21, TCP/22, TCP/2049

Note that FortiMail uses the following URLs to access the FortiGuard Distribution Network (FDN):

  • fortiguard.net l service.fortiguard.net l support.fortinet.com

Furthermore, FortiMail performs these queries and updates listed below using the following ports and protocols:

  • FortiGuard Antispam rating queries: UDP 53, 8888, 8889 l FortiGuard AntiVirus Push updates: UDP 9443 l FortiGuard Antispam or AntiVirus updates: TCP 443
This entry was posted in FortiMail on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.