Forum Discussion
Problem FTPS passive
Hello Everyone,
For one of our customer, we have to deploy a FTPS server behind the F5. Here is my configuration of the VS :
And here is my problem, The FTP behind the F5 is working great, I can connect to it and transfer a file with success. But where I have a problem is when the server has TLS turned on. First I tried to manage the certificate with the F5 (TLS is off on FTP server) so I created a SSL client profiles but it's not working :
And when TLS is turned on onto the server but the certificate is not managed by the F5 here is the error message i have:
I connect with a real account.
1/Do you think it's a F5 conf problem of a FTP/Certificate problem : Someone already had this kind of problem and how did he manage to resolve it? 2/Do I need to create a irules to limit the range of port to connect?
Thanks in advance.
5 Replies
- IainThomson85_1
Cumulonimbus
Might be worth a read of -
https://support.f5.com/kb/en-us/solutions/public/9000/300/sol9347.html?sr=41837690
- BlackBolt_22590
Nimbostratus
Hello Iain, Indeed, after following the steps it worked with a "normal" connection. Behind a 4G connection it doesn't. Any idea why? - IainThomson85_1
Cumulonimbus
A 4G connection will likely becoming from a very complex NAT'd Mobile Carrier network - You might want to investigate with the mobile provider why it doesn't work. Although i'm not saying you'd get very far. Glad to hear you got it working under a normal scenario - BlackBolt_22590
Nimbostratus
Well I think i'll advise my customer to stop using 4G connection^^ thanks anyway.
- superego
Altostratus
Had same problem for implementing FTPS passthrough. Followed document: https://support.f5.com/csp/article/K9347
I configured a separate SNAT pool for FTPS with 1 SNAT address only
and the other thing is have to configure the VIP in the External IP Address of Firewall.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
