handling encrypted FTP Traffic (FTP over TLS) is problematic. In most cases, and in terms of firewalling, you would need to open the whole available portrange for the webgateway.
The main problem is PASV Mode transfer as the data transferports are negotiated encrypted here, so the firewall behind the webgateway cannot see which transfer ports are used and in consequence the firewall inspection cannot open these transfer ports, like it would happen when using unencrypted FTP.
If you need to get encrypted FTP through the Webgateway, I'd suggest to use sFTP.
Best regards Marcus
P.S.: If you find this post helpful, thank You for giving it a Kudo :o)
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.