Skip to main content
cam5720
cam5720
New Member
June 13, 2023
Question

Fortinet Interface

  • June 13, 2023
  • 1 reply
  • 1821 views

FortiClient login interface is running on 11443/TCP, as expected. A scan also identified 80/TCP open and forwarding to 11443/TCP. Is it necessary for port 80 to be open for VPN functionality?  And if not, can port 80 be turned off and still have VPN functionality on 11443/TCP?

1 reply

msmrox
msmrox
New Member
June 13, 2023

Have you disabled the http allowance in the WAN interface?

Do you use Let's encrypt certs for VPN? If yes then this is expected as ACME service uses port 80 on the WAN interface.

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/822087/acme-certificate-support

 

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!