Forwarding VIP question

Apologies for the delay, I did not get an update notice for the comment. I also missed the part about this being FTP. For active mode FTP, a forwarding wildcard virtual will be needed, just restrict the source to your ftp servers. You would need to SNAT from the original ftp virtual address so that the client recognizes the connection. Since in active mode, the data connection is outbound initiated, you would need a default route. auto last hop would not work. If active mode is being used currently, I am not sure how it is working now without the forwarding vip. This would be in route domain 1 since that is where your servers are.

for passive mode, the ftp profile should be all you need, no forwarding virtual needed.