FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
yangw
Staff
Staff
Article Id 361733
Description This article describes how FortiAuthenticator keeps sending non-stop traffic to ftc.fortinet.com
Scope FortiAuthenticator v6.5.3 and below.
Solution

FortiAuthenticator keeps sending non-stop traffic to ftc.fortinet.com with service port 8686.

 

TCP/8686 is related to FortiToken Cloud communication, the following documentation regarding this information: fortiauthenticator-open-ports 

 

The related known issue (bug id 950326) has already been fixed on v6.5.4: fortiauthenticator/6.5.4/resolved-issues  

 

Action plan:

  • Arrange an available time to upgrade firmware to v6.5.4 to fix the issue.
  • Create an A-Record on the DNS server that FortiAuthenticator uses for ftc.fortinet.com with the IPv4 0.0.0.0. Note that this will break FortiToken Cloud communication, but does not affect regular FortiToken Mobile or FortiToken Hardware that have been imported with a license to this FortiAuthenticator.