Ports Required for FortiClient Communication to Cloud EMS

[MrHoosFoos]

Hi All,

Been searching through docs but haven't found a clear answer...

What TCP / UDP ports are required for FortiClient to comm with a cloud hosted EMS? Is it all just over TCP 443?
And then - with all the individual services (exe's) installed with FortiClient, which specifically will comm with EMS?

If there is a doc published somewhere please share;

Thank you!

FortiClient 
FortiCloud Products 

[dingjerry_FTNT · Accepted solution]

Hi @MrHoosFoos ,

Please check this link:

https://docs.fortinet.com/document/forticlient/7.4.1/ems-quickstart-guide/439480/required-services-a...

The ports for EMS in the link are also the same for the EMS Cloud.

[MrHoosFoos]

Thanks for the info. 
So - this document shows all the port requirements for EMS... so if I have clients sitting in an on-premises network, and am only allowing TCP80 & 443 out, I would also need to allow out:
TCP 8013 
TCP 10443

Am I understanding that correctly?

Thank you!

[dingjerry_FTNT]

You may need to allow ICMP as well:

FortiClient endpoint probing

FortiClient EMS uses ICMP for endpoint probing during FortiClient initial deployment.

ICMP

[MrHoosFoos]

Thank you for the clarification!

[dingjerry_FTNT]

Actually there is another way to allow traffic between FortiClient Endpoints the FortiClient EMS cloud:

https://docs.fortinet.com/document/forticlient-cloud/latest/cloud-deployment/30295/allowlisting-the-...

Allowlisting the FortiClient Cloud IP addresses