Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
HQS
New Contributor

Firewall and FTP REST

Hi, i use the REST Command for a FTP connection and get the following error msg:
502 Command REST not allowed by policy.
I create a Firewallpolicy but this rule doesn´t work:
 config firewall policy
     edit 34
         set srcintf " internal1" 
         set dstintf " wan1" 
             set srcaddr " Srv-Internal" 
             set dstaddr " External-FTP" 
         set action accept
         set utm-status enable
         set schedule " always" 
             set service " FTP Group" 
         set av-profile " unfiltered" 
         set profile-protocol-options " unfiltered" 
         set nat enable
     next
 end
 
Has anyone an idea what could be wrong? Cheers
3 REPLIES 3
edsouza_FTNT
Staff
Staff

First, if you are going to use the " unfiltered" profiles, do you even need utm-status enabled? 2nd please post the antivirus and protocol-options " unfiltered" profile configuration.
HQS
New Contributor

Hi, if utm is disabled, the unfiltered profiles aren´t available. I can disable the utm profile but the error also exist. Here my Profile:
 show antivirus profile unfiltered
 config antivirus profile
     edit " unfiltered" 
     next
 end
 
What do you mean with Protocol-Options? Cheers
HQS
New Contributor

Hi, i solved this Problem:
 config firewall policy
     edit 34
         set srcintf " internal1" 
         set dstintf " wan1" 
             set srcaddr " Mietserver5" 
             set dstaddr " Euronics FTP" 
         set action accept
         set utm-status enable
         set schedule " always" 
             set service " FTP Group" 
         set av-profile " unfiltered" 
         set webfilter-profile " unfiltered" 
         set profile-protocol-options " unfiltered" 
         set nat enable
     next
 end
 
UTM Webfilter must be set to unfilterd! Than it works fine... Cheers
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors