FTPS and Service - problem

[_slv_]

Hello

I have FTP server on Debian 7 (ProFTPD 1.3.1) and security rule:

and now FTPS connection works.

With "application-default" as a service FTPS sessions hangs on listing directory and sfter some time FTP client was disconected.

I'm on 6.0.2 PAN with latest updates.

Is this a normal behaviour? According to best practice we should use "application-default" as a service - but in this case we couldn't.

Please share Your opinion about that.

With regards

SLawek

[hshah]

Hi SLV,

Can you please put enalarged Traffic log, I think FTPS is using non-standard port here. That why "Any" is required.

Regards,

Hardik Shah

[_slv_]

FTP server using standart ports.

[hshah]

Hi SLV,

Yes, FTP is using standard port 21 and it must work with application-default.

However, this discussion thread was opened for  FTPS, which is different than FTP. Can you provide enlarged log for FTPS?

Regards,

Hardik Shah

[_slv_]

What does mean "enlarged log for FTPS"?

Do You need "sh session id xxxx" output?

small  update, I'm using 1.3.4a ProFTPD.

Regards

Slawek

[hshah]

Hi SLV,

If you read title for this thread it says "FTPS and service - Problem". Are you referring FTP by using word FTPS?

Regards,

Hardik Shah

[hshah]

Hello SLV,

If you want to find out root cause for issue,  than try following commands.

debug dataplane packet-diag set filter on

debug dataplane packet-diag set filter match source <Client-IP>  destination <Server-IP>

debug dataplane packet-diag set filter match destination<Client-IP> source <Server-IP>

show counter global filter packet-filter yes delta yes

Than Generate Traffic

Again execute command "show counter global filter packet-filter yes delta yes"

Regards,

Hardik Shah

[AlexAState]

you may want to look at the link below. FTPS is not a regular FTP

How to Allow FTPS/FTPES Traffic Through the Firewall

[hshah]

FTP uses 21 port

FTPS will use 443 port.

Applipedia doesn't have application name as FTPS.

[pulukas]

Look at your Ubuntu proftpd.conf file and confirm what port is configured as the listening port for the traffic.  These are frequently on non-standard ports which mean you can't use application default.  You can use any or the better option of the specific port that is configured.

[_slv_]

Hello

Only one option related to ports is:

# Port 21 is the standard FTP port.

Port                            21

FTPS uses the same port as a FTP (look onto my screenshot) and above configurations. Applipedia dosn't have dedicated app because its a regular FTP tunneled in SSL (according to my knoweladge)

With regards

Slawek

[hshah]

In that case FTPS is SSL running on port 25, hence you must need any for it to work.

[MarcoLeckel]

Hi ,

i think you are mixing up some thinks.

FTPS is FTP with TLS encryption and uses still standard Port 21

SFTP is secure copy over ssh Protocol which uses Port 22

I don't know why hshah is talking about Port 25

FTPS should work with app FTP and app-default (actually it does in my config)

You should start a flow debug to find out whats happening.

Regards

Marco

[_slv_]

I have problem with FTPS I know what it is and differences between SFTP and FTPS http://en.wikipedia.org/wiki/FTPS

Regards

Slawek

[MarcoLeckel]

Ok,

FTPS (with client Option explicit over TLS) should work with app FTP and App default.

You should start a flow debug to find out whats happening.

Regards

Marco