Define a Passive Data Outbound Port Range for an FTP Reverse Proxy Adapter

Edit online

About this task

Two modes can be used to open the FTP data channel: active mode and passive mode. The mode used on the inbound connection is determined by the client. Secure Proxy always uses passive mode for the outbound connection.

In active mode, the inbound FTP node sends a port command identifying the data channel listen port on which Secure Proxy needs to connect. You identify the port numbers to use for an active data connection in the Active Data Outbound Port Range field.

In passive mode, the FTP client sends a PASV command and Secure Proxy starts a listener to receive the data connections from the client. You identify a port number range to use to start the listener that receives connections.

To define a passive data outbound port range:

Procedure

  1. From IBM Sterling Secure Proxy, select Configuration from the left hand-side navigation panel.
  2. Click Adapters, then in the FTP Reverse Proxy tile, click View Adapters to display the list of created FTP Reverse Proxy Adapters.
  3. Click Adapters, then click View all Adapters to display the list of created adapters.
  4. Select the Adapter you want to edit, click Edit icon.
  5. Click the Advanced tab.
  6. Type a value to use for the passive data outbound port range in the Passive data Listening Port Range field.
  7. Click Save.