Technical Tip: How to use port 8000 for explicit proxy on FortiGate/FortiProxy

[esalija]

Description	This article describes how to work around the error code -23 when trying to change the http-incoming-port to 8000.
Scope	FortiGate, FortiProxy.
Solution	When trying to change the http-incoming-port 8000, the following error will be encountered: port 8000 is being used by fsso object check operator error, -23, discard the setting Command fail. Return code -23 Port 8000 is for the Collector Agent to send keep-alive and push logon info to FortiGate. FortiGate will be listening on this port by default. More information can be found at Fortinet Single Sign On - FortiGate 6.4.0 documentation. Change the listening port on the fsso-polling configurations: config system fsso-pollin     set listening-port 9000 end