Skip to main content
A
Anonymous_User
Contributor
November 24, 2004
Question

Traffic from FW to udp port 8888

  • November 24, 2004
  • 2 replies
  • 6205 views
Does anyone know why my Fortinet 100 is generating traffic from its external interface IP to several internet addresses at udp port 8888? I' m seeing between 6 and eight concurrent sessions all the time. I' m running 2.80 MR6 Thanks, Andrew

    2 replies

    Alex_Libenson
    Alex_Libenson
    New Member
    November 24, 2004
    8888 is FortiGuard web filtering and 8889 is FortiShield spam filtering. Do you have FortiGuard enabled?
    A
    Anonymous_UserAuthor
    Contributor
    November 24, 2004
    Yup ... that might do it. Funny thing is that I' ve actually turned off the category block rules (ie allow all) in the protection profile yet it' s still generating the traffic. If it doesn' t need to check a url then why would it still be generating connections? Not a big deal ... just wondering.
    wellington
    wellington
    New Member
    November 24, 2004
    If you have FortiGuard enabled web filter -> category block -> enable service then it starts to monitor the fortiguard servers around the world for the best/closest/fastest it' s probably this monitoring that you are seeing. The monitor is probably not checking whether the service is turned on in a profile but is building a list of servers for when you do have a profile that uses fortiguard. If you uncheck ' enable service' the packets should stop. Of course if they don' t then my idea is invalid!
    Terms & ConditionsAccessibility statement