- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
Opening custom port for a Passive mode FTP Server
10/14/2021 
229 People found this article helpful
21,481 Views
Description
File Transfer Protocol (FTP) operates on TCP ports 20 and 21 where port 21 is the Control Port and 20 is Data Port. However, when using non-standard ports (eg. 2020, 2121), SonicWall drops the packet as it is not able to identify it as FTP traffic. A new option has been introduced to set custom control port for FTP traffic called "Enable FTP Transformations for TCP port(s) in Service Object". Enabling this option would help SonicWall identify traffic to and from the custom port as FTP traffic.
This article describes the method to set a custom control port for FTP.
Resolution
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
In this scenario we have an FTP server behind the SonicWall listening on port 2121 configured in Passive Mode. The configuration would be the same if the server is configured in Active Mode also.
|  |
|
|
Create the following Access Rule and NAT Policy.
- Click Manage in the top navigation menu
- Navigate to Rules | Access Rules
- Click on Add
- Create the access rule as below
- Click on ADD
- Click Manage in the top navigation menu
- Navigate to Rules | NAT Policies
- Click on Add
- Create the NAT Policy as below
- Click on ADD
- Select the address object for the custom service under Enable FTP Transformations for TCP port(s) in Service Object on the Firewall Settings | Advanced page.
Resolution for SonicOS 6.2 and Below
The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.
In this scenario we have an FTP server behind the SonicWall listening on port 2121 configured in Passive Mode. The configuration would be the same if the server is configured in Active Mode also.
|  |
|
|
- Create the following Access Rule and NAT Policy
- Access Rule under Firewall | Access Rule
- NAT Policy under Network | NAT Policies
- Select the address object for the custom service under Enable FTP Transformations for TCP port(s) in Service Object on the Firewall Settings | Advanced page.
Related Articles
- Configuring Aggressive Mode Site to Site VPN when a Site has Dynamic WAN Public IP address
- High Availability: Idle / Standby appliance cannot pass traffic, WAN and LAN side.
- How do I configure the SSL-VPN feature for use with NetExtender or Mobile Connect?
Categories
- Firewalls > SonicWall NSA Series
- Firewalls > SonicWall SuperMassive 9000 Series
- Firewalls > SonicWall SuperMassive E10000 Series
- Firewalls > TZ Series
YES
NO