How to open or allow filtered service port such as (Zabbix service TCP port 10050,10051) ?

Forum|Forum|11 years ago
April 1, 2015
4 replies
18394 views

Hi all,

I use FortiGate 200D version 5.0 in my network as forefront.

When I scanned by using port scanner(nmap) to all service ports whether open or not on fortigate, as the result show some port are already opened and some port are closed and filtered.

Actually,I want to allow Zabbix service port tcp 10050 and tcp 10051.

Zabbix ports are also show as filtered state on fortigate.

So, how can I allow or open it in fortigate both GUI or CLI?

Pls help me.

Thanks

email: aunghtunoo@reddotnetwork.com

skype: maxdiego2014

Dave_Hall

New Member

The Fortigate has a set of "open" ports used on it -- if you like to see what those ports are from the GUI, click on the System->config->Features->enable "Local In Policy" then click on "Policy->Local In Policy". If you want to control/block certain ports directed at the Fortigate, you need to use local-in-polices. See also Open Ports Diagrams or KB 10773.

Assuming you have a "zabbix" server behind the Fortigate, you can create a VIP to it (on port 10050-10051) from outside going in. (I am assuming this is what you want.)

1. Create a custom service for ports 10050-10051.

2. Create a VIP to internal IP address of server.

3. Create a Firewall Policy using the above.