Problem FTPS passive

[BlackBolt_22590]

Hello Everyone,

For one of our customer, we have to deploy a FTPS server behind the F5. Here is my configuration of the VS :

And here is my problem, The FTP behind the F5 is working great, I can connect to it and transfer a file with success. But where I have a problem is when the server has TLS turned on. First I tried to manage the certificate with the F5 (TLS is off on FTP server) so I created a SSL client profiles but it’s not working :

And when TLS is turned on onto the server but the certificate is not managed by the F5 here is the error message i have:

I connect with a real account.

1/Do you think it’s a F5 conf problem of a FTP/Certificate problem : Someone already had this kind of problem and how did he manage to resolve it? 2/Do I need to create a irules to limit the range of port to connect?

Thanks in advance.

[IainThomson85_1]

Might be worth a read of -

404 Page not found | BIG-IP Documentation

[BlackBolt_22590]

Hello Iain, Indeed, after following the steps it worked with a “normal” connection. Behind a 4G connection it doesn’t. Any idea why?

[IainThomson85_1]

A 4G connection will likely becoming from a very complex NAT’d Mobile Carrier network - You might want to investigate with the mobile provider why it doesn’t work. Although i’m not saying you’d get very far. Glad to hear you got it working under a normal scenario

[BlackBolt_22590]

Well I think i’ll advise my customer to stop using 4G connection^^ thanks anyway.

[superego]

Had same problem for implementing FTPS passthrough. Followed document: myF5

I configured a separate SNAT pool for FTPS with 1 SNAT address only

and the other thing is have to configure the VIP in the External IP Address of Firewall.