Skip to main content
rcpdkc
Explorer II
May 22, 2025 8:55 PM UTC
Question

Fortigate Nmap Problem

Hello. When I do Nmap scan to my wan ip address, all ports appear open. There is no port forwarding in the vip section. In the Dos Policy section, threshold values are entered 10 for TCP and udp. Also all services are deny in local in Policy section. What could be the reason why the ports appear open in nmap?

2 replies

Anthony_E
Staff
Staff
May 26, 2025 4:02 AM UTC

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Translate
Best Regards
Yurisk
SuperUser
SuperUser
May 26, 2025 5:29 AM UTC

It cannot be, if Local-in policy has deny everything, which means most probably you have something misconfigured. Look at show firewall vip, show firewall local-in and also logs of Fortigate - do you see your nmap scan hitting the firewall?

 

Translate
yurisk.info - all things Fortinet blog, no ads
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024