Fortinet 666 FortiWeb 5.0 Patch 6 Administration Guide
Appendix A: Port numbers
Communications between the FortiWeb appliance, clients, protected web servers, and
FortiGuard Distribution Network (FDN) require that any routers and firewalls between them
permit specific protocols and port numbers.
The following tables list the default port assignments used by FortiWeb.
Table 58:Default ports used by FortiWeb for outgoing traffic
Port number Protocol Purpose
N/A ARP HA failover of network interfaces. See “HA heartbeat &
synchronization” on page 40.
N/A ICMP • Server health checks. See “Configuring server up/down
checks” on page 254.
•execute ping and execute traceroute. See the
FortiWeb CLI Reference.
21 TCP • Anti-defacement backup and restoration (FTP). See
“Anti-defacement” on page 498.
• FTP configuration backup. See “To back up the
configuration via the web UI to an FTP/SFTP server” on
page 208.
22 TCP • Anti-defacement backup and restoration (SSH/SCP). See
“Anti-defacement” on page 498.
• SFTP configuration backup. See “To back up the
configuration via the web UI to an FTP/SFTP server” on
page 208.
25 TCP SMTP for alert email. See “Configuring email settings” on
page 576.
53 UDP DNS queries. See “Configuring DNS settings” on page 130.
69 UDP TFTP for backups, restoration, and firmware updates. See
commands such as execute backup or execute
restore in the FortiWeb CLI Reference.
80 TCP Server health checks. See “Configuring server up/down
checks” on page 254.
123 UDP NTP synchronization. See “Setting the system time & date” on
page 91.
137, 138, 139 UDP Anti-defacement backup and restoration (Windows-style
share). See “Anti-defacement” on page 498.
162 UDP SNMP traps. See “SNMP traps & queries” on page 580.
389 TCP LDAP authentication queries. See “Configuring LDAP
queries” on page 228.