Use the FTP Firewall Support feature page to modify the settings for passive connections when FTP clients are connecting to an FTP server that is located behind a firewall server.


If you configure these options, you will only control the behavior of the FTP server. You will still have to configure your firewall to accept FTP connections and route them appropriately to your FTP server.

UI Element List

The following tables describe the UI elements that are available on the feature page and in the Actions pane.

Feature Page Elements

Element Name Description

Data Channel Port Range

Specifies the port range for passive connections used for data channel connections. The valid range for ports is 1025 through 65535. (Ports from 1 through 1024 are reserved for use by system services.)


You can enter a special port range of "0-0" to configure the FTP server to use the Windows TCP/IP ephemeral port range, which is often set to use ports 1025 through 5000 by default.

External IP address of Firewall

Specifies the IPv4 address for the external IP address of the firewall server.


This setting is required when your FTP server is located behind a firewall server and you are using SSL, or your firewall does not modify the IP addresses in the FTP packets that are exchanged by the client and server.

Actions Pane Elements

Element Name Description


Applies changes to the FTP Firewall Support feature page.


Cancels changes to the FTP Firewall Support feature page.