Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions FTP Transfer drops if max size greater then 10MB

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 40 subscribers
Views 5141 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FTP Transfer drops if max size greater then 10MB

Christoph Bütler over 6 years ago

Hi

Firewall is an XG230 (SFOS 17.0.6 MR-6). In the firewall policy "Scan FTP for Malware" is activ.

If max file scan size is bigger then 10MB FTP transfer is interrupted. With 10MB as max size bigger files are transfered.

Tried it with 29MB, 20MB, 15MB and 10MB. File sizes were 3MB and 68MB.

Is this a bug or am I missing something?

Thank you

Christoph

This thread was automatically locked due to age.

0 Michael Dunn over 6 years ago

Take a look at the following settings:

Web \ General Settings \ Advanced Settings \ Maximum file scan size for FTP

Web \ Policies \ Edit the policy that you have selected in the firewall rule \ Advanced \ Maximum permitted size
Cancel
Vote Up 0 Vote Down

Cancel
0 Christoph Bütler over 6 years ago in reply to Michael Dunn

Thanks for the reply.

Settings for Web \ Policies \ Edit the policy that you have selected in the firewall rule \ Advanced \ Maximum permitted size look like

The setting for maximum permitted size is inactiv.

And the problem is not the download, it's uploading the file.

Settings for Web \ General Settings \ Advanced Settings \ Maximum file scan size for FTP look like

Regards
Christoph
Cancel
Vote Up 0 Vote Down

Cancel
0 Michael Dunn over 6 years ago in reply to Christoph Bütler

Can you try setting the FTP scan size to 100MB ?

If that does not work, I would contact support.
Cancel
Vote Up 0 Vote Down

Cancel