topic FTPS (FTP explicit SSLTLS) in Network Security https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868505#M489045 <HTML><HEAD></HEAD><BODY><P>why would I open 21 for FTPS?, 21 is for FTP</P></BODY></HTML> Sat, 07 Jan 2012 17:04:23 GMT networker99 2012-01-07T17:04:23Z FTPS (FTP explicit SSLTLS) https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868503#M489043 <P>Can anyone tell me how to get this working&nbsp; (outside host coming in though ASA 5505 running 8.4).</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 22:11:38 GMT https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868503#M489043 networker99 2019-03-11T22:11:38Z FTPS (FTP explicit SSLTLS) https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868504#M489044 <HTML><HEAD></HEAD><BODY><P>Try by opening TCP - 21 , 21000 &amp; 21010 and use PASV mode (unless you already have the list of TCP ports).&nbsp; Also, in 8.4 you need to allow ACL to 'real' ip than public ip. Check the below links.</P><P></P><P><A _jive_internal="true" href="https://community.cisco.com/docs/DOC-12324">https://supportforums.cisco.com/docs/DOC-12324</A></P><P></P><P>hth</P><P>MS</P></BODY></HTML> Sat, 07 Jan 2012 17:02:11 GMT https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868504#M489044 mvsheik123 2012-01-07T17:02:11Z FTPS (FTP explicit SSLTLS) https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868505#M489045 <HTML><HEAD></HEAD><BODY><P>why would I open 21 for FTPS?, 21 is for FTP</P></BODY></HTML> Sat, 07 Jan 2012 17:04:23 GMT https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868505#M489045 networker99 2012-01-07T17:04:23Z FTPS (FTP explicit SSLTLS) https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868506#M489046 <HTML><HEAD></HEAD><BODY><P>21 is control channel for Explicit SSL, allowing the user's computer to send commands to the server. Now, this may be from client end in which case from inside ASAs allow outbound connection (default). You can give a try without port 21 and post back what worked for you.</P></BODY></HTML> Sat, 07 Jan 2012 17:12:56 GMT https://community.cisco.com/t5/network-security/ftps-ftp-explicit-ssltls/m-p/1868506#M489046 mvsheik123 2012-01-07T17:12:56Z