Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Forwarding non-standard ssh port to standard ssh port internal (remote SFTP Server)

Hi all,

# XG330

I have a project to set up an SFTP server to transfer data securely from a remote station to the SFTP server located in
the DMZ.(Head Ofice)
the server is installed, configured and integrated into the dmz.
the remote client uses an sftp tool to automatically transfer data with a configured task, using : ipaddr: non-standard port

So I created a dnat rule as follows:

and I created the firewall rule as follows:

For more security the client will have to connect with a non-standard SFTP port, then the FW will have to do the port translation of the non-standard port
to the default SSH port which is 22.
the first connection tests were not successful! Impossible to connect
Is there anything I forgot?
Are there other particularities to take into account and adjust the configuration?

thanks



This thread was automatically locked due to age.
Parents Reply
  • Please check with packet capture, tcpdump and drop packet the behaviour of the traffic this will help you to check it in right direction.

    "Sophos Partner: Networkkings Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

Children
  • Hi   

    Packet Capture output

    what does it mean ??

  • Seems Service is off: You need to change the Source Port to 1:65335 to include the high ports. If issue remains,please verify the service port you have added on the firewall rule and NAT rule 

    TEST by changing source WAN -> ANY - Destination  LAN -> server IP - Service (TCP 1:65335 to SFTP port no) -> any time -> log. Use linked NAT rule and choose MASQ I think should automatically setup the correct interfaces.

    Please post the services object created here with tcpdump and drop packet if issue remains.

    "Sophos Partner: Networkkings Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.