set service-system-default FTP

Description

Configures settings of the built-in FTP service object.

Syntax

set service-system-default FTP [ port <port> ] [ disable-inspection <disable-inspection> ] [ session-timeout <session-timeout> ] [ use-source-port { false | true [ source-port <source-port> ] } ] [ keep-connections-open-after-policy-installation <keep-connections-open-after-policy-installation> ] [ sync-connections-on-cluster <sync-connections-on-cluster> ] [ sync-delay-enable <sync-delay-enable>] [ delay-sync-interval <delay-sync-interval> ] [ aggressive-aging-enable <aggressive-aging-enable> ] [ aggressive-aging-timeout <aggressive-aging-timeout> ]

Parameters

Parameter

Description

aggressive-aging-enable

Enable to manage the connections table capacity and memory consumption of the firewall to increase durability and stability.

aggressive-aging-timeout

Time (in seconds) before the aggressive aging times out.

delay-sync-interval

Time (in seconds) after connection initiation to start synchronizing connections.

disable-inspection

Disable deep inspection of traffic matching this service.

Type: Boolean (true/false)

keep-connections- open-after-policy- installation

True to keep connections open after policy has been installed, even if they are not allowed under the new policy.

port

Destination ports (a comma separated list of ports/ranges).

Type: Port range

session-timeout

Time (in seconds) before the session times out.

source-port

Source port

sync-connections-on-cluster

Enables state-synchronized High Availability or Load Sharing on a ClusterXL or OPSEC-certified cluster. Of the services allowed by the Rule Base, only those with synchronize connections on cluster will be synchronized as they pass through the cluster.

sync-delay-enable

True to delay connections synchronization.

use-source-port

Use source port.

Example

set service-system-default FTP port 8080-8090 disable-inspection true session-timeout 15 use-source-port false source-port 8080 keep-connections-open-after-policy-installation true sync-connections-on-cluster true sync-delay-enable true delay-sync-interval 15 aggressive-aging-enable true aggressive-aging-timeout 15