- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FTP control on ports >1024
Hi,
I'm searching for a way to open the ports >1024 for a set of servers only for FTP traffic.
There's a way to accomplish this with the Firewall policy? For example for understand that the traffic that is passed is related to FTP although is on ports different to 21 (This is the default behavior of FTP passive).
Thanks
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Firewall policy look up relies on FTP session helper. You may consider to change FTP session helper port. Please find the details by following the link below:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @DanieleS99
If you want to open a port for a set of servers, you can make a separate firewall policy for them and define the ports under service.
You can create a service object under Policy & Objects--> Services and then add this to the firewall policy.
Regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @DanieleS99
Adding on to the firewall policy. Please make sure you are not enabling the Antivirus security profile as it can drop the FTP traffic.
Thank you
Verender
