Feature Request: FTP Proxy with TLS Support

Keven

Hi all,
one of our customer need passive FTP with explicit TLS.
Now we have the problem... we dont know wich passive ports used by servers.
Any outgoing for only the ftp servers is possible but trash.

Can you please develop the support for SSL/TLS for FTP-Proxy?
Thank you much!

Greets
Keven Ekinci | ATD GmbH

james.carson

Hi @Keven
There is an open feature request for this - it is FBX-15765 -- if you'd like to follow it, please create a support case and mention FBX-15765 in the case.

This issue is currently open -- and a proxy would take some time to develop -- I would suggest using a packet filter for the time being. The existing FTP proxy will not be able to support this need.

JJNet

We have had an RFE request open with WatchGuard since 2013 for this feature

RFE61499: Proxy Support for (SFTP/FTPS/FTP over SSL/TLS)

Tristan.Colo

I advise getting the exact destination of the services having issues and using a packet filter for that specific traffic while leaving the FTP Proxy to handle other generic un-encrypted traffic.

I advise this so that you are still scanning unencrypted stuff while not breaking critical Services.

james.carson

@JJNet and @Keven This request has been closed out and will not be done at this time.

I did a cursory search for cases with the older bug and wasn't able to discern which one was @JJNet, but cases with that feature request should have been notified of this late last year when the request was closed out.