Solved: Re: TCP port 179 is open in firewall - Fortinet Community

Support Forum

The Forums are a place to find answers on a range of Fortinet products from peers and product experts.

Why is tcp port 179 open in firewall even though BGP is not used?

Because it is scanned as being open.

Is there any way to disable it?

12017

1 Solution

Let's consider this topology:
172.16.1.1 ------ [LAN1|FGT|LAN2] ----- 192.168.1.1
LAN1 IP address: 172.16.1.2

You can block ping from 172.16.1.1 to 192.168.1.1 using firewall policy with srcintf LAN1 and dstintf LAN2.
But to block ping from 172.16.1.1 to 172.16.1.2, you need a local-in policy.

Easy example: In GUI navigate to Network> Interface. Edit an interface and allow administrative access ping.
This simply creates a local-in policy allow for ping on this interface.
You can display local-in policies in GUI in System> Feature Visibility.
If you don't allow administrative access ping on the interface: default local-in policy is used which is action=drop.

View solution in original post

11639

25 REPLIES 25

Hello! You can block incoming traffic with local-in policies:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/363127/local-in-policy

You can define incoming interface, protocol, port... And allow or block the traffic matching your settings.

8315

Why is tcp port 179 open in firewall even though BGP is not used?

8295

Hi @BusinessUser,

Do you have BGP configured on the FortiGate? Do you have any VIP/Virtual server for port forwarding on TCP 179?

Regards,

8291

There is bgp enabled to communicate with the ISP router.

However the security team is unhappy that port 179 is open to all.

So should i use a local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8204

Hi @BusinessUser,
Please refer to this article for more detail "https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-close-BGP-port-179-with-Local-in-po...

Regards,
Minh

8286

Hi All,

I need help.

There is bgp enabled to communicate with the ISP router.

However the security team is unhappy that port 179 is open to all.

So should i use a local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8207

Hi,

Please follow the KB for block the port 179 with local-in policy - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-close-BGP-port-179-with-Local-in-po...

Best regards,

Erlin

8182

still doesnt answer the question

what is the difference between using local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8170

Hi,

Here you can find the doc for the Firewall Policy - https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/656084/firewall-policy

Local-in Policy - https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/363127/local-in-policy

Port 179 is open by default - https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/895321/view-open-and-in-use-...

Best regards,

Erlin

8162

Top Kudoed Authors

User

Count

1660

1077

752

443

220

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Copyright 2024 Fortinet, Inc. All Rights Reserved.