WAN Acces to ftp server not work if i enable Antivirus on the rule

[MMASLOUH]

Hi,

i have an internal ftp server and i have allowed the wan cliens to use this server, everything works fine, the clients can access from the wan.

But if I enable antivirus on this rule, ftp client authentication keeps failing.

Réponse : 502-Auth command is not supported.
Réponse : 502-Please contact your network administrator to enable FTPS service.
Réponse : 502

[Dongkwan]

Please refer to the link below.

*. Explicit FTP over TLS traffic handling in proxy-based policy
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explicit-FTP-over-TLS-traffic-handling-in-...

Regards,

[usednet]

useless link. there are no fix for this problem
moreover - mentioned commands are not implemented in FortiOS 6.4.x

[abarushka]

Hello,

Can you please specify whether firewall policy (AV) is in proxy or flow inspection mode? I would assume that there is a higher chance that it would work while flow inspection is set.