Emergency FTP on a Friday Night

[bdunbar]

PAN-200

PAN OS 6.

So there are, standing up an FTP server for client use.   Got it configured, and tweaked, and secure. Planned to figure out how to open up the firewall next week.

After hours.  Manager called.  I'm on a conference call.  Have some client data to move.  The old (hosted) ftp server is slow.  The new one is fast!   How about it ..

I like a challenge.  Policy, Security, Create a rule

Source: Zone: any  Address: any  User: any

Destination: Zone: any Address: ftpserverIP

Application: ftp

Okay - If I'm logged into the VPN I can, of course, still login to Mr. FTP.

But external access .. wait a second.  How do I tell the device to accept FTP traffic? 

We're not roadblocked - we're using the old (slow) hosted FTP.  But I'm sore confused about this part of it.

[pulukas · Accepted solution]

I guess this is too late to help, but the document you want is Understanding Pan-OS NAT.  In addition to your security policy to permit the traffic you will need to configure the nat policy for the inbound request to be translated from your public address into the server private address.

Understanding PAN-OS NAT

For inbound destination nat look at page 15 and following to find your correct situation.

[bdunbar]

Too late for Friday, but helpful when we want to expose it on the network: thanks.