Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dwyerpe
New Contributor

Explicit FTPS (FTP + SSL)

We have successfully set up plain old FTP via the Coyote Point on two of our clusters.  We now have the need to setup an explicit FTPS (FTP + SSL) and would like the Coyote Point to own the IP/do failover/load balancing.

 

We tried to setup the cluster the same was as the plain FTP (port 21 tcp) but figured this wouldn't work since the control data traffic is encrypted and we cannot terminate it at the Coyote Point (or can we?).  

 

Is there any supported way to set this up via the Coyote Point?  We are running V10.3.2a

 

Example failure from ftp program (tries to switch to PASV mode or something???):

Status: Connection established, waiting for welcome message... Status: Initializing TLS... Status: Verifying certificate... Status: TLS connection established. Status: Connected Status: Retrieving directory listing... Command: PWD Response: 257 "/" is current directory. Command: TYPE I Response: 200 Type set to I. Command: PASV Response: 227 Entering Passive Mode (12,71,36,116,193,67). Command: LIST Response: 150 Opening BINARY mode data connection. Error: GnuTLS error -110: The TLS connection was non-properly terminated. Status: Server did not properly shut down TLS connection Error: Transfer connection interrupted: ECONNABORTED - Connection aborted Response: 550 The network connection was aborted by the local system. Error: Failed to retrieve directory listing Error: Connection closed by server

 

 

Example success going direct (not through coyote [very different]):

Status: Connection established, waiting for welcome message... Status: Initializing TLS... Status: Verifying certificate... Status: TLS connection established. Status: Connected Status: Retrieving directory listing... Status: Directory listing of "/" successful

0 REPLIES 0
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors