Firewall blocked Fortinet Single Sing On Agent Configuration

[Marcos_FDS1012]

I have two machines that when the firewall is enabled with Domain it disconnects Fortinet Single Sing On Agent Configuration, if I disable the Domain Network firewall it works perfectly. This machine has the same rules as all the other machines. Has anyone experienced this?

[amrit · Accepted solution]

Please check these articles to allow the FSSO  blocked ports by the Windows firewall which can disrupt the normal functions FSSO agent

https://community.fortinet.com/t5/FortiGate/Technical-Note-Allowing-FSSO-Ports-when-using-Windows-Se...

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Port-blocks-in-Windows-Server-in-FSS...

[amrit · Accepted solution]

Please check these articles to allow the FSSO  blocked ports by the Windows firewall which can disrupt the normal functions FSSO agent

https://community.fortinet.com/t5/FortiGate/Technical-Note-Allowing-FSSO-Ports-when-using-Windows-Se...

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Port-blocks-in-Windows-Server-in-FSS...

[mle2802 · Accepted solution]

Hi @Marcos_FDS1012,

I believe that TCP 8000 and UDP 8002 should be allowed on you window firewall. You can try the following command on Window server and see if that help:

For Inbound Traffic:

C:\>netsh advfirewall firewall add rule name="FSSO_TCP_8000" dir=in action=allow protocol=TCP localport=8000

C:\>netsh advfirewall firewall add rule name="FSSO_UDP_8002" dir=in action=allow protocol=UDP localport=8002

For Outbound Traffic:

C:\>netsh advfirewall firewall add rule name="FSSO_TCP_8000" dir=out action=allow protocol=TCP localport=8000

C:\>netsh advfirewall firewall add rule name="FSSO_UDP_8002" dir=out action=allow protocol=UDP localport=8002