Port 10428 — Unassigned, Mostly Empty, But Claimed by Fortinet

What This Port Is

Port 10428 falls into the registered port range (1024-49151), assigned by IANA to requesting organizations. Unlike well-known ports (0-1023), which have global standards, registered ports are meant for specific services on a first-come, first-served basis. ¹

Port 10428 has no official assignment in the IANA registry. It sits in the spare parts bin.

Who Actually Uses It

Fortinet uses port 10428 for IKE SAML authentication in FortiClient and FortiGate systems. ^{2 3} When you connect to a corporate VPN using Fortinet's IPsec with SAML-based authentication, this port handles the handoff between your identity provider and the VPN gateway. Your credentials get verified here before the tunnel even forms.

This is a real use case—but a narrow one. It only shows up on networks running Fortinet's security stack. Fortinet didn't formally register it; they just chose it and documented it in their product releases.

Why This Matters

Port 10428 is honest about what the Internet has become: official assignments can't keep pace with vendor needs. Companies don't wait for IANA blessing; they pick unused ports and build their products around them. As long as you're not colliding with someone else's choice, the port system doesn't care. It just works.

Checking What's Listening

To see if anything is listening on port 10428:

On macOS/Linux:

sudo lsof -i :10428

On Windows (PowerShell):

netstat -ano | findstr :10428

Network scan (if you have permission):

nmap -p 10428 <hostname>

If nothing shows up, this port is doing its job silently—which, on most networks, is to not be there at all.

The Broader Picture

Registered ports (1024-49151) are a commons. Thousands exist. Some get formal use (like 8080 for HTTP proxies), others are claimed by vendors (like 10428), and most sit empty on any given network. They represent the Internet's generosity: enough addresses for everyone's special case, as long as you don't step on someone else's toes.

Port 10428 is one of the quiet ones—important only if you're running enterprise VPN infrastructure. For everyone else, it's just a number that doesn't carry a story. Yet.