XG210 - Access to FTP Server from Outside Works, Then Doesn't

Hi Patrick,

Is the FTP server hosted internally through a DNAT policy? When you see the drops, show me the system graphs from | Diagnostics | System Graphs. Next, is there an Anti-DoS configured which is dropping the packets. Check #1 in my troubleshooting guide and monitor the drop-packet-capture logs and when the FTP is down.

Thanks

Hi Sachin, thanks for the reply!

If you can see the screenshot I posted the green icons are DNAT Policies that I set up. The FTPs are hosted internally, the 192.168.31.24 and .25 addresses. The x.x.x.122 and x.x.x.118 are the WAN IPs.

This is a brand new unit and nothing besides the FTP Rules and a VLAN Interface have been set up.

Ugh... It is now working again. I should be happy but instead I'm irritated. I will review your troubleshooting guide!

I see many FTP rules configured, let's start with a cleanup. All the FW-rules that do not have any traffic displays 0B value on the bottom left, delete them!

Next, configure a new DNAT policy by referring to Sophos Firewall: How to DNAT to an internal server. Show me the picture of configuration if the rule doesn't work. 

Cheers

I see many FTP rules configured, let's start with a cleanup. All the FW-rules that do not have any traffic displays 0B value on the bottom left, delete them!

Next, configure a new DNAT policy by referring to Sophos Firewall: How to DNAT to an internal server. Show me the picture of configuration if the rule doesn't work. 

Cheers

Thanks Sachin,

It's nice to get all of that cleaned up! I worked on the Rules with a Sophos tech and we were able to determine the ultimate issue... The WAN IPs were still holding onto the MAC address from the old SonicWALL in the ISP's ARP Table. Once those propagated with the Sophos MAC address everything worked!

Patrick