config ftp-proxy explicit
Configure explicit FTP proxy settings.
config ftp-proxy explicit
Description: Configure explicit FTP proxy settings.
set status [enable|disable]
set incoming-port {user}
set incoming-ip {ipv4-address-any}
set outgoing-ip {ipv4-address-any}
set sec-default-action [accept|deny]
set ssl [enable|disable]
set ssl-cert {string}
set ssl-dh-bits [768|1024|...]
set ssl-algorithm [high|medium|...]
end
config ftp-proxy explicit
Parameter name |
Description |
Type |
Size |
||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
status |
Enable/disable the explicit FTP proxy. |
option |
- |
||||||||||
|
|
||||||||||||
incoming-port |
Accept incoming FTP requests on one or more ports. |
user |
Not Specified |
||||||||||
incoming-ip |
Accept incoming FTP requests from this IP address. An interface must have this IP address. |
ipv4-address-any |
Not Specified |
||||||||||
outgoing-ip |
Outgoing FTP requests will leave from this IP address. An interface must have this IP address. |
ipv4-address-any |
Not Specified |
||||||||||
sec-default-action |
Accept or deny explicit FTP proxy sessions when no FTP proxy firewall policy exists. |
option |
- |
||||||||||
|
|
||||||||||||
ssl |
Enable/disable the explicit FTPS proxy. |
option |
- |
||||||||||
|
|
||||||||||||
ssl-cert |
Name of certificate for SSL connections to this server (default = "Fortinet_CA_SSL"). |
string |
Maximum length: 35 |
||||||||||
ssl-dh-bits |
Bit-size of Diffie-Hellman (DH) prime used in DHE-RSA negotiation (default = 2048). |
option |
- |
||||||||||
|
|
||||||||||||
ssl-algorithm |
Relative strength of encryption algorithms accepted in negotiation. |
option |
- |
||||||||||
|
|