Technical Tip: TCP/7810 port open when WANOpt is n...

FortiProxy

FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching

Article Id 352189

Description

This article describes the behavior in FortiProxy for TCP port 7810 when WANopt is not enabled.

Scope

FortiProxy 7.0.18, FortiProxy 7.2.11, FortiProxy 7.4.5

Solution

TCP 7810 is used for WANopt. It has been identified while doing a vulnerability scan that TCP port 7810 is open and listening when WANOpt is not enabled.

config system interface
edit "port2"
        set vdom "root"
        set ip 10.193.3.141 255.255.240.0
        set allowaccess ping https ssh http telnet
        set type physical
        set snmp-index 2
    next
end

When using telnet to port 7810 on 10.193.3.200, a TCP handshake can be observed on that port, indicating that the port is open and actively listening for connection.

Capture+.PNG

The resolution for the identified issue, referenced as known issue 1070236, has been addressed and fixed. The solution for it is to upgrade to FortiProxy 7.0.19, FortiProxy 7.2.12, FortiProxy 7.4.6 and FortiProxy 7.6.0.

Capture++.PNG

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: TCP/7810 port open when WANOpt is not enabled