If you are ever wondering what ports needs to be open for various Fortinet products to interact and struggled to find them, here you go. If you are like me that has Zero trust for everyone and everything, this will work well for you. This information is available on the Fortinet Docs Site but I thought I would host it all on a single page for those that follow this site.
Fortigate
For the Fortigate, we can see the different pieces to which it communicates with and that communicate with it.
FortiAnalyzer
FortiAnalyzer or FAZ is the Centralized Logger and Reporting platform for Fortinet.
FortiAPs
This is your Fortinet Wireless Access Points. You can see the communication between both the Cloud as well as the Fortigate.
FortiAuthenticator
FortiAuthenticator or FAC is the RADIUS, and Centralized Authentication Platform for Fortinet. It can be a RADIUS, MFA Manager, BYOD and Guest Portals, CA Server, 802.1x Server, etc.
FortiClient (No EPP)
FortiClient is the original version prior to the recent acquisition of EnSilo.
FortiGuard Services
FortiGuard is the service from Fortinet that does all the threat research, creates IPS, Application, Virus signatures, etc. It also hosts Fortinet’s secure DNS platforms.
FortiMail (On-Prem)
Fortimail is the second oldest Fortinet Solution, second to the Fortigate. It is a full-featured secure email platform.
FortiManager
FortiManager is the Fortinet Cenralized Management Platform that can manage thousands of devices from a single location.
FortiSandbox (FSA)
This is Fortinet’s Sandbox (On-Prem).
3rd Party
For all others connections not defined above.
Hope this helps
