Skip to main content
tturba
tturba
New Member
November 16, 2015
Question

Cannot connect to FTPS server outside

  • November 16, 2015
  • 1 reply
  • 11920 views

Hello.

 

I've got a small issue, I cannot connect to an external FTPS server which use 21 port for PASV and dynamic from 50000 to 55000. I've tried to use session-helper, and also this workaround with inverted directions: http://kb.fortinet.com/kb/documentLink.do?externalID=FD32835

but it always timeouts. Is there any feature for this or procedure how to pass this traffic? On the firewall policies for this testing I allow all traffic (ANY services) on both directions.

 

Thanks in advance.

1 reply

gschmitt
gschmitt
New Member
November 17, 2015

Create a new policy to the FTPS server without SSL Inspection and move it above the existing policy.

Does the issue disappear with that?

tturba
tturbaAuthor
New Member
November 18, 2015

Hello. I've tried like this:

fromif: LAN

toif: ISP

src: all

dst: ftps_server

service: all

permit

rest disabled

 

fromif: ISP

toif: LAN

src: ftps_server

dst: all

service: all

permit

rest disabled

 

But it don't work

tturba
tturbaAuthor
New Member
November 18, 2015

I can see that the policy LAN->ISP is generating packets, but ISP->LAN doesn't. So it is the case of session-helper?

 

Terms & ConditionsAccessibility statement