Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
BusinessUser
Contributor

Created on ‎09-29-2023 04:25 AM

TCP port 179 is open in firewall

Why is tcp port 179 open in firewall even though BGP is not used?

Because it is scanned as being open.

Is there any way to disable it?

Labels:
12016
0 Kudos
1 Solution
nweckel
Staff
Staff
In response to BusinessUser

Created on ‎10-09-2023 03:59 AM

Let's consider this topology:
172.16.1.1 ------ [LAN1|FGT|LAN2] ----- 192.168.1.1
LAN1 IP address: 172.16.1.2

You can block ping from 172.16.1.1 to 192.168.1.1 using firewall policy with srcintf LAN1 and dstintf LAN2.
But to block ping from 172.16.1.1 to 172.16.1.2, you need a local-in policy.

Easy example: In GUI navigate to Network> Interface. Edit an interface and allow administrative access ping.
This simply creates a local-in policy allow for ping on this interface.
You can display local-in policies in GUI in System> Feature Visibility.
If you don't allow administrative access ping on the interface: default local-in policy is used which is action=drop.

View solution in original post

11638
25 REPLIES 25
nweckel
Staff
Staff

Created on ‎09-29-2023 04:37 AM

Hello! You can block incoming traffic with local-in policies:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/363127/local-in-policy

You can define incoming interface, protocol, port... And allow or block the traffic matching your settings.

8314
BusinessUser
Contributor
In response to nweckel

Created on ‎09-29-2023 06:07 AM

Why is tcp port 179 open in firewall even though BGP is not used?

8294
0 Kudos
hbac
Staff
Staff

Created on ‎09-29-2023 06:14 AM

Hi @BusinessUser,

 

Do you have BGP configured on the FortiGate? Do you have any VIP/Virtual server for port forwarding on TCP 179?

 

Regards,

8290
0 Kudos
BusinessUser
Contributor
In response to hbac

Created on ‎10-06-2023 09:02 PM

There is bgp enabled to communicate with the ISP router.

However the security team is unhappy that port 179 is open to all.

So should i use a local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8203
0 Kudos
mle2802
Staff
Staff

Created on ‎09-29-2023 06:54 AM

Hi @BusinessUser,
Please refer to this article for more detail "https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-close-BGP-port-179-with-Local-in-po...

Regards,
Minh

8285
0 Kudos
BusinessUser
Contributor

Created on ‎10-06-2023 08:54 PM Edited on ‎10-06-2023 08:59 PM

Hi All,

I need help.

There is bgp enabled to communicate with the ISP router.

However the security team is unhappy that port 179 is open to all.

So should i use a local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8206
0 Kudos
esalija
Staff
Staff

Created on ‎10-07-2023 12:52 AM

Hi,

Please follow the KB for block the port 179 with local-in policy - https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-close-BGP-port-179-with-Local-in-po...

Best regards,

Erlin

8181
0 Kudos
BusinessUser
Contributor
In response to esalija

Created on ‎10-07-2023 03:45 AM

still doesnt answer the question

 

what is the difference between using local in policy or a firewall policy?

Why is port 179 open to all in the first place?

8169
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.