Sophos Firewall Blocked Filezilla in PASV mode

Hi,

what does logviewer show as the result of the attempted connections?

Which version of XG are you running?

Ian

Thank you.

The XG firmware should be SFOS 18.5.0 GA-Build289 and model XGS107 .i have attached the print screen in the post.

The FTP Server should be 18.139.120.246 and 10.10.50.0/24 should be LAN network.

Parker

Try to disable bounce protection: community.sophos.com/.../ftp-passive-mode

Thank you. The issue already fixed by below commnad.

set advanced-firewall ftpbounce-prevention data 

Just create a business rule on firewall page .

Source > WAN

Destination > Your WAN Port

Services > Create New >

TCP - Source: 1:65535 - Destination 21

TCP - Source: 1:65535 - Destination 990

TCP - Source: 1:65535 - Destination 50000:51000 (don't forget the set filezilla passive port to 50000:51000)

Forward to > Protected Server: (Your ftp server) - Protected Zone: LAN

Tick >Create Reflexive Rule

Open console > 4. Device Console >

set advanced-firewall ftpbounce-prevention data 

It works perfectly on me. 

You are talking about a DNAT. Dont do that. Do not open those Ports from external to internal for no reason.