Best Practice to Publish FTP on NAT

Hi,

I’m having a NAS device in a NATed network. SOPHOS does handle all traffic.

I was able to publish the web GUI of NAS through SOPHOS. So now I’m able to login, upload and download using the NAS GUI.

This NAS, does support FTP, and I’m planning to publish it for FTP protocol.  So:

-What is the best practice? Just disable anonymous acces and restrict the access on password authentication? Is it enough?

-Please guide me how to publish my NAS as an FTP server through SOPHOS.