Hey Robert, Welcome to the community! So, ftp-over-HTTP is accessing the server in the browser by ftp:// instead of http://. An example would be - ftp://speedtest.tele2.net/ This shows a page like the below: Palo Alto is smart enough to recognize the underlying application which is 'ftp'. The logs from my attempt: Now, most FTP servers do (and imo should) function as 'Passive' server. Meaning, the client would make the data connection after the control connection, which is what's shown in the screenshot above. If the FTP server is in Active state, then you'd have to allow inbound connection from the server to the client. FYI - I am assuming that the client is behind the firewall and the FTP server is outside somewhere in the www. Regards, Anurag
... View more