PCI and port 1000 & 1003

Forum|Forum|8 years ago
January 18, 2018
2 replies
10369 views

We are failing an external PCI scan because port 1000 and 1003 are open and listening on old security protocals. How can I disable these ports? I read that they are disabled by default, but they seem to be open. It looks like they are for Authentication. Thanks in advance.

NeilG

New Member

You say 1000/1003 are listening on old-security protocols. Whose old protocols? built-in fortigate or your own?

What is the Fortigate model and firmware?

Have you looked at your local-in policies?

Have you opened a support ticket?

dmcquade

New Member

These are related to the keepalive for user authentication and not necessarily traffic trying to communicate outbound. You will see these messages when you have the logging set to log all traffic.

HTH

d