Skip to main content
Gypsy_Dave
New Member
August 31, 2020
Question

FTP on policy DMZ questions

  • August 31, 2020
  • 1 reply
  • 2175 views

Hi,

I have an FTP set-up on a DMZ and I use VIPS to forward the ports too it,  as we only have one public IP address, which is assigned to the FG. I have a policy setup to allow access from internet to it. This all works fine.  

 

My problem is the FTP server is seeing all source connections coming from the FG's local DMZ IP and not the original external source IP. Is there a way to preserve the original external source IP? Reasons being for logging purposes on the FTP and other services it's running. 

 

Thanks,

 

    1 reply

    Markus
    New Member
    August 31, 2020
    Seems you have Nat enabled on the Policy, just disable it...
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT