Skip to main content
esalija
Staff
Staff
July 16, 2025

Technical Tip: How to use port 8000 for explicit proxy on FortiGate/FortiProxy

  • July 16, 2025
  • 0 replies
  • 673 views
Description This article describes how to work around the error code -23 when trying to change the http-incoming-port to 8000.
Scope FortiGate, FortiProxy.
Solution

When trying to change the http-incoming-port 8000, the following error will be encountered:

 

port 8000 is being used by fsso
object check operator error, -23, discard the setting
Command fail. Return code -23

 

  • Port 8000 is for the Collector Agent to send keep-alive and push logon info to FortiGate.
  • FortiGate will be listening on this port by default.
  • More information can be found at Fortinet Single Sign On - FortiGate 6.4.0 documentation.
  • Change the listening port on the fsso-polling configurations:


config system fsso-pollin
    set listening-port 9000
end

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!