FTP ALG

Hello @martyyy ,

If I understand correctly, you want to use FTP helper for different TCP ports instead of 20/21. 

If you say yes, you can follow this document for your request. 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-access-FTP-server-externally-on-different/ta-p/195059

Hello martyyy

As under passive mode, ftp server just listen passively, you only need configure your server FTP properly in order to work in passive mode.  (*)
Your \FTP client configured in passive mode, client starts all connections, server passively listen 
Under FGT you have the usual vip config on port 20/21 

obs:

- we' re NOT talking here about FTP over TLS or another scenario.

- (*) for example, if you use a widely ftp server as VSFTPD, these 3 lines in server confg will take care of passive traffic for data transfer after fork

pasv_enable=Yes
pasv_max_port=40000
pasv_min_port=50000

Actually there is a reason behind no option provided for disabling ALG for FTP protocol. In perspective of AppID, FTP cannot work without ALG for both active & passive modes.