Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

FTP Firewall Support


Updated: February 29, 2012

Applies To: Windows Server 2012 R2, Windows Server 2012

Use the FTP Firewall Support feature page to modify the settings for passive connections when FTP clients are connecting to an FTP server that is located behind a firewall server.


If you configure these options, you only control the behavior of the FTP server. You still have to configure your firewall to accept FTP connections and route them appropriately to your FTP server.

Related scenarios

The following tables describe the UI elements that are available on the feature page and in the Actions pane.

Element Name


Data Channel Port Range

Specifies the port range for passive connections used for data channel connections. The valid range for ports is 1025 through 65535. (Ports from 1 through 1024 are reserved for use by system services.)


You can enter a special port range of "0-0" to configure the FTP server to use the Windows TCP/IP ephemeral port range, which is often set to use ports 1025 through 5000 by default.

External IP address of Firewall

Specifies the IPv4 address for the external IP address of the firewall server.


This setting is required when your FTP server is located behind a firewall server and you are using SSL, or your firewall does not modify the IP addresses in the FTP packets that are exchanged by the client and server.

Element Name



Applies changes to the FTP Firewall Support feature page.


Cancels changes to the FTP Firewall Support feature page.

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
© 2015 Microsoft