FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
bksol92
Staff
Staff
Article Id 352892
Description This article explains what port 8793 is used for in FortiAnalyzer, and how to disable it.
Scope FortiAnalyzer.
Solution

FortiAnalyzer has port 8793 open on all interfaces by default:

 

8793.PNG

 

Port 8793 is the default port of the airflow process, which is used by FortiAnalyzer's playbook feature. To disable this port, the SOC module can be disabled with the following settings:

 

config system global

    set disable-module soc

end

 

It will take time for FortiAnalyzer's process to completely kill the airflow process, but a reboot of FortiAnalyzer can also put this change into effect.

 

Related articles:

Incoming ports