Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

FTP Proxy Settings

Settings for running a proxy on an appliance under FTP.

When a file is uploaded to the web from an FTP client and processed on Web Gateway, you can send progress indicators to the client by inserting the FTP Upload Progress Indication event into a suitable rule.

This will prevent a timeout on the client when processing takes more time, for example, due to scanning the file for infections by viruses and other malware.

Option Definition
Enable FTP proxy

When selected, a proxy is run on an appliance under FTP.

FTP port definition list

Provides a list for entering the ports on an appliance that listen to client requests.

Allow character @ in FTP server user name (Authentication using USER ftpserveruser@ftpserver)

When selected, this character is allowed in a user name.

Enable authentication using USER proxyuser@ftpserveruser@ftpserver

When selected, this syntax is allowed for a user name.

Enable authentication using USER ftpserveruser@proxyuser@ftpserver

When selected, this syntax is allowed for a user name.

Enable customized welcome message

When selected, you can edit the welcome message that is shown to a user who sends a request for web access under the FTP.

Type the welcome message into the Customized welcome message text field, using the appropriate values for the variables that are contained in the message.

Welcome to  MWG-ProductName$ $MWG-Version$ - build
$MWG.BuildNumber$
Running on $System.HostName$ - $System.UUID$
$Proxy.IP$:$Proxy.Port$

Select the command to be used for next-hop proxy login

Allows you to select the command that Web Gateway sends for logon when connecting to a next-hop proxy under FTP.

The following commands can be selected:

  • SITE
  • OPEN
  • USER@Host

 

The following table describes an entry in the FTP port definition list.

Option Definition
Listener address

Specifies the IP address and port number for a port that listens to requests from clients coming in on a Web Gateway appliance under FTP.

Port range for client listener

Configures a range of numbers for ports that listen to FTP requests received from clients.

The range is configured by specifying port numbers for its beginning and end.

Port range for server listener

Configures a range of numbers for ports that listen to FTP responses received from web servers that requests were forwarded to.

Allow clients to use passive FTP connections

When selected, requests can be sent from clients using passive connections under the FTP protocol.

Web Gateway uses same connections (active/passive) as clients does

When selected, Web Gateway uses the same type for forwarding web traffic as a client that sent a request to Web Gateway.

Web Gateway uses passive FTP connections

When selected, Web Gateway can forward web traffic using passive connections under FTP.

NOTE: When the FTP-over-HTTP mode is configured, Web Gateway always uses active connections to reach out to the FTP server even if this checkbox is selected.

Comment

Provides a plain-text comment on a port that listens to FTP requests.

 

  • Was this article helpful?