FCP-FSA-AD-5-0: Fortinet NSE 5 - FortiSandbox 5.0 Administrator

By Fortinet · Question Mode

QuestionQ34

VerifiedSystem Configuration

A connectivity problem exists between FortiSandbox and the FortiGuard distribution servers. You notice that a firewall positioned between FortiSandbox and the internet permits traffic on the following ports:

  • TCP/4443
  • UDP/8888
  • UDP/53

What is causing this issue?

Explanation

FortiSandbox reaches the FortiGuard Distribution Network (FDS) servers, such as fds1.fortinet.com, to download antivirus and IPS engine/database updates over TCP port 8890. The firewall in this scenario permits UDP/53 and UDP/8888 (used for FortiGuard rating and Community Cloud query traffic) but only allows TCP/4443, which is not a recognized FortiGuard port — the correct port needed for FDS distribution server communication, TCP/8890, is missing. Opening TCP 8890 outbound resolves the connectivity problem to the FortiGuard distribution servers.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!