FTP between hosts on VPN TUNNEL not working

Hello Kirsten Mellein,

Thank you for reaching out to the community, can you please create a two separate FW rules i.e. traffic from LAN to VPN and VPN to LAN [in vpn to lan create a LINKED NAT with MASQ enabled] And see if that helps.

Based on the error 550 - It is a permanent negative response, which means the client is discouraged from sending the command again since the server will respond with the same response code.

Hello,

thanks for your answer. 

The dataflow ist rz -S2SVPN> customer -S2SVPN> service provider

and

service provider -S2SVPN> customer -S2SVPN> rz

So if i configure the two firewall rules the traffic don't pass this rules. 

Best regards

Kirsten Mellein, can you confirm with the packet capture which FW rule the traffic hits ?
Monitor traffic using Packet Capture Utility : https://support.sophos.com/support/s/article/KB-000035761?language=en_US

I see that all the relevant traffic pass the rule 0 (drop all). 

After that i have configure two firewall rules with source and destination zone any. I attach only the source and destination networks. Now i can see in the log that the traffic pass the new rules and port 21 is allowed. 

But data transfer over ftp isn't working. 

I see that all the relevant traffic pass the rule 0 (drop all). 

After that i have configure two firewall rules with source and destination zone any. I attach only the source and destination networks. Now i can see in the log that the traffic pass the new rules and port 21 is allowed. 

But data transfer over ftp isn't working. 

Can you provide us a screenshot of the FW rule configured and the packet capture where traffic for the FTP can be seen going through FW rule 21 ? And have you tried creating a linked NAT rule with option MASQ under Translated source (SNAT)