Architecture

FortiAuthenticator-VM is a virtual appliance version of FortiAuthenticator. It is deployed in a virtual machine environment such as VMware ESX (or ESXi), MS Hyper-V, or the Linux based Virtual Machine Manager.

Once the virtual appliance is deployed and set up, you can manage FortiAuthenticator-VM via its GUI in a web browser on your management computer.

FortiAuthenticator-VM requires the following connectivity for management. Inbound management using Telnet and HTTP is not recommended. SSH is intended for initial configuration and diagnostics only. For more information, see the FortiAuthenticator Administration Guide.

Inbound management:

Service	Port
Telnet	TCP 23
HTTP	TCP 80
HTTPS	TCP 443
SSH	TCP 22

Outbound management:

Service	Port
DNSlookup	UDP 53
NTP	UDP 123
FortiGuard Licensing	TCP 443 (required for initial token registration)
Log Export (FTP)	TCP 21