For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sysadmin_209494's avatar
sysadmin_209494
Icon for Nimbostratus rankNimbostratus
Jul 06, 2015

Passive FTP Port Range

We have an FTP application that is using Port 9021 for the incoming FTP Port. Once this is established with the backend FTP Application, the application then opens up a random FTP Passive Port from ...
application delivery
design
LTM
eskindir_27991's avatar
eskindir_27991
Icon for Nimbostratus rankNimbostratus
Sep 16, 2015

The below should work for both FTP or FTPS. If your server does not support Active transfer mode you can ignore the SNAT configuration section. If you have only one server behind the F5 you may not need the source address based configuration. Finally as the virtual server is listening in all ports you may want to add irule to drop packets destined to ports that your FTP server is not listening to both control and the passive data range.

 

https://support.f5.com/kb/en-us/solutions/public/9000/300/sol9347.html

 

  • syedimam_147051's avatar
    syedimam_147051
    Icon for Nimbostratus rankNimbostratus
    Feb 27, 2016
    Can you please advise if it works? I have same problem and it works with TCP profile but failed after receiving PASV entrance from server.