FortiAuthenticator 4.2.1 lots of TCP/2195 outbound?

tanr · ‎03-07-2017

I'm seeing a FAC 200D regularly attempting TCP 2196 (and get blocked) repeatedly to a set of IP's in the 17.188.*.* range.

Most resolve to gateway.push.apple.com. or others in the APPLE-WWNET range.

Anybody know if the FAC should be using Apple Push Notifications? This seems a little odd to me.

Carl_Windsor_FTNT · ‎03-08-2017

Apple (and Android) Push services are used in the new FortiToken Mobile Push Token supported in FAC 4.2 so you are seeing this communication. If this is not working for any reason (the blocks), raise a support tickets.

Dr. Carl Windsor
Chief Information Security Officer (CISO)
Fortinet

View solution in original post

Carl_Windsor_FTNT · ‎03-08-2017

Apple (and Android) Push services are used in the new FortiToken Mobile Push Token supported in FAC 4.2 so you are seeing this communication. If this is not working for any reason (the blocks), raise a support tickets.

Dr. Carl Windsor
Chief Information Security Officer (CISO)
Fortinet

tanr · ‎03-08-2017

Ah, that makes sense. Thanks, Carl.

Per another thread about FAC push notifications, https://forum.fortinet.com/tm.aspx?m=146521, is there any way to turn push notifications off on the FAC?

FortiAuthenticator 4.2.1 lots of TCP/2195 outbound?

Nominate a Forum Post for Knowledge Article Creation

You are leaving our website