For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swathi_sankabat's avatar
swathi_sankabat
Icon for Nimbostratus rankNimbostratus
May 09, 2018

FTPS VIP creation

Hello All,   I need a detailed information of how to create VIP for FTPS communication for two backend servers in my F5 device. Which ports do I need to allow for this passive FTP communication in...
BIG-IP
security
Domai's avatar
Domai
Icon for Altostratus rankAltostratus
May 09, 2018

For the passive FTP, the ports are actually configured on the server. Lets say you allocate 3001 - 3005 for passive FTP communication then when you create a VIP you need to assign that port range. Make sure your firewall also allows those ports. Firewall rule would look like

 

ANY---->(Allow port 3001-3005,21)---->VIP

 

Passive FTP is where the data channel is opened by the server and communicated to the client asking the client to come and connect to it using the ports that it opened to get the data.