Fortimanager (TCP 541) on all interfaces by default?

[nsantin]

I just installed a new pair of FGT60s (MR2.11) and discovered that FortiManger is enabled out of the box. Didn' t think much about it as I dont use it. After completing my config I ran a port scan and I saw TCP 541 is open on all interfaces despite the firewall config. I turned off fortimanager and the port closed. Is this normal? I didn' t see anywhere to specific which interface fortimanger runs on, I was suprised to see an open port on the WAN interfaces for this.