FortiEDR.Core

Description

This indicates an attempt to communicate to the FortiEDR Core.
FortiEDR provides advanced, real-time threat intelligence, visibility, analysis, management, and endpoints protection for both pre- and post-infection. The FortiEDR Core listens to communication on tcp port 555 by default.

Affected Products

FortiEDR Core

Impact

Network resources consumption

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Default Ports

• TCP/555

References

• https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/9a7241aa-7435-11ea-9384-00505692583a/FortiEDR_Installation_and_Administration_Guide_V4.1.pdf
• https://www.fortinet.com/products/endpoint-security/fortiedr