What ports should be open to let FortiClient make an outgoing SSL VPN connection?

[miko]

client behind FW    --->    their FW     -----------internet------------>    FortiGate FW

What ports should be open on FW to let FortiClient make an outgoing SSL VPN connection to FortiGate FW?

[kolawale_FTNT · Accepted solution]

The default SSL VPN port is either 443 or 10443 on the FortiGate. The CLI command: 'show vpn ssl settings' displays the port number, among other settings.

The default in FortiClient is 443. Since regular HTTPS also uses port 443, it is open on most networks.