(V3.x) What IPs do I use in my firewall rule to allow LDAP / LDAPs / SMTP traffic to my LDAP / Active Directory Server / SMTP Gateway(s)?

FAQ: What IPs do I use in my firewall rule to allow LDAP / LDAPs / SMTP traffic to my LDAP / Active Directory Server / SMTP Gateway(s)?

In order to be able to import users from an LDAP or Active Directory, the Security Awareness and Training Service must be allowed to access the server. Before this can be done, in most cases, this requires creating a firewall rule to allow traffic in. 

For the Fortinet Security Awareness and Training Service, you should create a firewall rule to allow traffic from the following IPs:

If you selected to store your data in the US when you initialized your service, then use these IPs:

54.69.233.204

35.165.54.209

35.81.112.57

For the Fortinet Phishing Simulation Service, you should create a firewall rule to allow traffic from the following IPs:

154.52.1.119

If you selected to store your data in EMEA when you initialized your service, then use these IPs:

3.77.188.254

35.157.179.181

18.194.82.115

For the Fortinet Phishing Simulation Service, you should create a firewall rule to allow traffic from the following IPs:

154.52.1.119

If you do not know what option you selected, you can open a ticket by emailing infosec_support@fortinet.com with a subject of:  Please provide my user data storage country.

If you would like assistance testing your firewall rule, Directory conectivity and LDAP filters or SMTP settings, you can also request the IP address of one of our Deployment coordinators. Temporarily adding their IP will allow them to verify all settings and assist in troubleshooting the configuration.

You can further limit this traffic to the port that your LDAP or Directory / SMTP Gateway(s) server(s) listen on (and that is configured both on the Directory Server and Security Awareness and Training Service).  Please check with your Directory administrator / email administrator to determine the listen port for your Active Directory / SMTP servers.  The registered industry standard/default ports are:  LDAP:  389  /  LDAPS: 636 / SMTP: 25