Passive FTP Session helper only? Checkpoint FTP_PASV ?? Can FGT do the same?

[ted_barker]

Hi, We only allow today FTP_PASV on checkpoint and do not want to allow active FTP. Does FGT support this limitation as well and how?

[AtiT]

Hi, the ftp session-helper can handle the active and passive FTP connections.

I am just wondering whether you set your FTP server to support passive mode ftp if you need to block the active mode? The active mode just simply will not work and the connection will fail.

[ted_barker]

We need to ensure this on the firewall, to prevent misuse