We have a FortiEMS 7.4 and we want to expose RPC ports through the ZTNA.
For what I have read so far there is only possibility to define single port per ZTNA destination rule.
The problem is that by specification RPC uses:
- TCP 135
- Dynamic TCP range 49152-65535.
How to make the dynamic range accessible through the ZTNA?
On the FortiGate site it is OK, but on the client site when we try to create destination rule like:
Server: 49152-65535
The server is no longer resolved through ZTNA and no connection can be processed by it.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
you can try doing a TCP forwarding instead of https.
You can refer the article referred and instead of youtube.com use your destination server IP with no port forward,
I am doing TCP forwarding.
But for use of dynamic ports I need to define 14K rules, which is 11MB policy and is not working.
It is easy to forward one port, I need a huge range of ports.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1517 | |
1013 | |
749 | |
443 | |
209 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.