FTP Time Out

Forum|Forum|17 years ago
July 29, 2009
7 replies
5060 views

We keep on experience FTP time out when we are behind fortigate 800. When we put up connection in front of fortigate (using the same internet line), we have no problem in upload and download. Any suggestion to check?

lmuir

New Member

Are you AV scanning FTP traffic? Have you configured the comfort client setting?

A

Anonymous_UserAuthor

Contributor III

yes, I have av scanning ftp traffic. But I don' t understand what you mean by comfort client setting and how to configure confort client setting?

ede_pfau

SuperUser

We had the same issues here with some Linux ftp client starving on very big transfers. Disabling AV scanning helped. But that was before Fortinet introduced the comforting feature. It is configured in the associated protection profile. Have a look into the Admin Guide as well and the release notes of your major release. You might also try out if increasing the session timeout for FTP would help (default is 600 sec).

TopJimmy

New Member

ORIGINAL: ede_pfau You might also try out if increasing the session timeout for FTP would help (default is 600 sec).

where can I found that setting at? I' ve just checked the CLI and Admin guide and I must be having a blond moment because I don' t see it.

A

Anonymous_UserAuthor

Contributor III

What firmware?? FortiOS 4.0 has issues with passive ftp. It has been resolved in 4.0.3 Hope it helps

g3rman

New Member

TopJimmy, take a look at this blog post. http://firewallguru.blogspot.com/2008/03/session-timeouts.html

TopJimmy

New Member

Thanks for the link! Unfortunately I' ve started to get the dreaded " Fortigate has reached system connection limit for x seconds" messages so I' ve been following the articles on the KB about reducing the TTL (among other things like AV, etc) to see if I can stop getting the messages. KB Articles: http://tinyurl.com/kjcyad http://tinyurl.com/nmhv3b

Sign up

Login with SSO

Login to the community

Login with SSO