FTP - Does not block file extension exe/com

Hello Prasanth,

first thing that comes to my mind: Web is not FTP, so why do you expect a webfilter to block FTP-things?

Or are you doing Web-FTP?

If using the FTP-proxy function of the UTM, you could do it like this:

Hello Philip,

Thank you. This helped. But i did not see the count increase in statistics for this block anywhere.

I need : In the utm content filtering statistics, the Base on extension list counter should increment accordingly

Is there an option if you would know where i can see this ?

Thank you for your advance reply. It will be really helpful.

Thanks,

kk

UTM has three different ways to do FTP filtering.    See the FTP section of this link:

https://community.sophos.com/products/unified-threat-management/f/recommended-reads/115522/sophos-utm-securing-and-configuring-web-filtering

Standard Mode Web Filter will intercept FTP addresses issued by a web browser, or issued by an FTP client configured to use Web Proxy mode with UTM as the proxy.   As I have written in many places, I recommend using Standard Mode web to filter browser traffic, and Transparent Mode Web to filter non-browser traffic.   All of the good FTP clients support multiple prxy modes, including web proxy.  Microsoft FTP does not support proxy, but better alternatives are available for free.

Transparent Mode FTP filter will intercept port 21 traffic from devices that do not use the Standard Mode Web proxy.  It is the natural companion to Transparent Mode Web Filter.

Standard Mode FTP proxy will cause a web browser to hang if it attempts to access an FTP site, so it should not be used at all.

Standard Mode Web Filter is a more powerful and more effective tool than Transparent Mode FTP, so one option is to make it the only allowed proxy method.   To do that, disable Transparent Mode FTP, and also block port 21 with Firewall Rules.  Any traffic that does not use the Standard Mode proxy will then be blocked.

UTM has three different ways to do FTP filtering.    See the FTP section of this link:

https://community.sophos.com/products/unified-threat-management/f/recommended-reads/115522/sophos-utm-securing-and-configuring-web-filtering

Standard Mode Web Filter will intercept FTP addresses issued by a web browser, or issued by an FTP client configured to use Web Proxy mode with UTM as the proxy.   As I have written in many places, I recommend using Standard Mode web to filter browser traffic, and Transparent Mode Web to filter non-browser traffic.   All of the good FTP clients support multiple prxy modes, including web proxy.  Microsoft FTP does not support proxy, but better alternatives are available for free.

Transparent Mode FTP filter will intercept port 21 traffic from devices that do not use the Standard Mode Web proxy.  It is the natural companion to Transparent Mode Web Filter.

Standard Mode FTP proxy will cause a web browser to hang if it attempts to access an FTP site, so it should not be used at all.

Standard Mode Web Filter is a more powerful and more effective tool than Transparent Mode FTP, so one option is to make it the only allowed proxy method.   To do that, disable Transparent Mode FTP, and also block port 21 with Firewall Rules.  Any traffic that does not use the Standard Mode proxy will then be blocked.

Hello,

Merry Christmas !

Thank you very much for your time and kind help.

I am not able to FTP if i have UTM in between my two hosts.

I followed the steps correctly. I tried between the hosts without UTM and FTP works.

It would be great if someone help me out on the below.

I am getting the following error.

Hi Prasanth,

You will find that you get better, faster help here if you present "raw" information instead of describing what you did.  The lines from the FTP log are very helpful.  Now, please show pictures of the 'Global' and 'Advanced' tabs of 'FTP'.

If you are attempting access via a web browser, show us the URL you're using.  If Web Filtering is in Standard mode, show us a picture of 'Allowed Target Services' on the 'Misc' tab of 'Filtering Options'.

Cheers - Bob