Passive FTP NAT

Question

Has anyone successfully setup an FTP server and been able to connect to it over the WAN? I have tried every setting under the sun with no luck. It will connect fine if I use Active Mode, so I know the NAT is working, but not with Passive. I've tried removing IPS polices, changing the MASQ to off, etc, etc. And unfortunately with the lack of logging, I can't determine why its not connecting. Please let me know if anyone has found any tricks. 
 
 Thanks

JohanCamps · Accepted Answer

As a former Cyberoam user I've learned some tricks that might apply here. I was running an FTP server on my LAN and couldn't access it, even with al the right port forwarding statements. 
 I logged a case with Cyberoam and this resulted in two console statements to get it working 
 1) Since I was using port 2121 as a public port (and private port as well): set service-param FTP add port 2121 
 2) And this setting was advised to change the FTP scanning behaviour: set advanced-firewall ftpbounce-prevention data Both commands have to be applied in the service console. 
 Since switching from Cyberoam to SophosXG I had to apply the same commands to SophosXG ;-) 
 Hope this helps!