topic Re: Emergency FTP on a Friday Night in General Topics

Emergency FTP on a Friday Night

bdunbar — Sat, 06 Dec 2014 00:14:37 GMT

PAN-200

PAN OS 6.

So there are, standing up an FTP server for client use. Got it configured, and tweaked, and secure. Planned to figure out how to open up the firewall next week.

After hours. Manager called. I'm on a conference call. Have some client data to move. The old (hosted) ftp server is slow. The new one is fast! How about it ..

I like a challenge. Policy, Security, Create a rule

Source: Zone: any Address: any User: any

Destination: Zone: any Address: ftpserverIP

Application: ftp

Okay - If I'm logged into the VPN I can, of course, still login to Mr. FTP.

But external access .. wait a second. How do I tell the device to accept FTP traffic?

We're not roadblocked - we're using the old (slow) hosted FTP. But I'm sore confused about this part of it.

Re: Emergency FTP on a Friday Night

pulukas — Sun, 07 Dec 2014 20:02:16 GMT

I guess this is too late to help, but the document you want is Understanding Pan-OS NAT. In addition to your security policy to permit the traffic you will need to configure the nat policy for the inbound request to be translated from your public address into the server private address.

Understanding PAN-OS NAT

For inbound destination nat look at page 15 and following to find your correct situation.

Re: Emergency FTP on a Friday Night

bdunbar — Mon, 08 Dec 2014 18:18:50 GMT

Too late for Friday, but helpful when we want to expose it on the network: thanks.