FTP Passive External XG115 SFOS 18.0.5 MR-5

Hi,

try to enable "Scan FTP for malware" in the Web Filtering section.

Hi,

Before I looked as if I had suggested disabling. Sorry, I got it wrong.

I enabled as suggested but access is not yet possible.
But logs with "invalid connection helper" are not displayed now.

And now I see the request allowed log.
However I see the log of the response or request from the server 201.55.60.68, as denied and the following message "Could not associate packet to any connection."

In this case I applied a DNAT for the traffic from the server. But without success.

Try to disable the ftp bounce protection: 

set advanced-firewall ftpbounce-prevention data

Try to disable the ftp bounce protection: 

set advanced-firewall ftpbounce-prevention data

Hi,

Thanks.
The command worked with the FTP scan web filter disabled.

At this point, by the command I don't explicitly see that FTP bounce would be disabled. But apparently switching protection mode. (I just think, on account of not seeing off, disable, etc in the command)

So I'm in doubt, which vulnerabilities would be exposed as a result of the change?

Personally i would not open any FTP service to external. To many vulnerabilities open and there are enough valid sharing solutions (like onedrive, dropbox etc.). So why bother with offering a solution inhouse and exposing a service, which could potentially be exploited? 

It's because it's government application. In which it connects to the FTP server to check and update it. And at this point, generally the government doesn't care about the safest and most correct way to make applications.

However, at this point I understood what you meant. In short, using FTP by itself is a risk.

However, thank you very much for your help.