Closing unnecessary ports

[fsmar]

WE have a fortigate with multiple VIP's, for securtiy purposes we would like to close the following ports which are being detected by security scans:

[ul]

1000/tcp

1003/tcp

541/tcp[/ul]

These seem to be opened automatically by the fortigate... how can i close them?

[emnoc]

have you research the fortigate used  ports  http://kb.fortinet.com/kb/viewContent.do?externalId=10773

No what that said, I believe you have  a rule allowing the 1000 1003 541, can you  run diag debug flow and a filter for dst port 1000   and validate the fwpolicyid that's involved?

[fsmar]

They are indeed part of that list and that is exactly the reason why i dont know how to block them as i have nothing explicitely allowing them from external.