FTP in PASV mode

[billsey]

Fortigate 30E, 5.4.3

I have FTP configured using the cookbook example and I'm able to connect if I use active mode, but in passive mode I'm unable to retrieve a directory listing, or pretty much anything else. "That's simple" I thought, so added a Virtual IP with the high numbered ports the sever uses (51051-51100), added a service that used that VIP, added the VIP to my Virtual IP Group for the FTP server and made sure the IPV4 Policy included all three FTP services plus my new PASV service. No joy, I still can't get a directory listing in PASV mode. What have I missed, and why isn't passive mode covered in the cookbook entries?