12-16-2016 07:20 AM
Hi,
I'm trying to figure out how to get outbound FTPES working on our firewall. I've gotten it partly working - I can establish a connection. But we have 2 ISPs (load balanced via weighted round-robin) and the data channel isn't always using the same egress interface as the control channel, which is causing the FTP server to reject commands. I know I can use a PBF to force control traffic out a specific interface (since it's using fixed port tcp/990), but since the data channels are dynamic and determined by the control channel (which I am decrypting), how can I force the data channel to use the same interface as the control? Is this possible? Currently running PanOS v7.1.6 with the latest dynamic updates. Let me know if you need any more info/logs/etc. Thanks!
Matt
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
