Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Not applicable

Created on ‎04-26-2010 11:27 AM

NAT Port is Exhausted

Getting the Alert " NAT Port is Exhausted" in our log. It' s listed as critical and nothing on our Firewall is showing any hiccups. 1240B with v4.0,build0272,100331 (MR2)
7358
0 Kudos
12 REPLIES 12
g3rman
New Contributor

Created on ‎07-21-2010 10:55 AM

Look at the event log, particularly for a very large increase in sessions and a spike in the CPU. Once you kill the process or after the upgrade these should decrease significantly.
A Real World Fortinet Guide Configuration Examples & Frequently Asked Questions http://firewallguru.blogspot.com
A Real World Fortinet Guide Configuration Examples & Frequently Asked Questions http://firewallguru.blogspot.com
564
0 Kudos
Not applicable

Created on ‎05-18-2011 01:18 AM

I have just received this log too, but the system seems to work ok. It' s the first time I received it, so I don´t know if I have to worry about it. This device is a FG-50B v.4.0 MR2 patch 4 (b313). Regards, Edited: since this morning, I have received it several times, so I opened a support ticket.
564
0 Kudos
emnoc
Esteemed Contributor III

Created on ‎05-19-2011 09:23 AM

You might need to do one of the following; adjust the NATs timeout split the SRCs into multiple ranges and apply SNAT pools to these ranges Your ephemeral port ranges are probably exhausted.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
564
0 Kudos
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.