set service-system-default FTP

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

Configures settings of the built-in FTP service object.

Syntax

set service-system-default FTP [ port <port> ] [ disable-inspection <disable-inspection> ] [ session-timeout <session-timeout> ] [ use-source-port { false | true [ source-port <source-port> ] } ] [ keep-connections-open-after-policy-installation {true | false} ] [ sync-connections-on-cluster {true | false} ] [ sync-delay-enable {true | false}] [ delay-sync-interval <delay-sync-interval> ] [ aggressive-aging-enable {true | false} ] [ aggressive-aging-timeout <aggressive-aging-timeout> ]

Parameters

Parameter

Description

aggressive-aging-enable

Enable to manage the connections table capacity and memory consumption of the firewall to increase durability and stability.

aggressive-aging-timeout

Time (in seconds) before the aggressive aging times out.

delay-sync-interval

Time (in seconds) after connection initiation to start synchronizing connections.

disable-inspection

Disable deep inspection of traffic matching this service.

Type: Boolean (true/false)

keep-connections-open-after-policy-installation

Controls whether to keep the current connections after policy installation, even if these connections are not allowed by the new policy..

port

Destination ports (a comma separated list of ports/ranges).

See IANA Service Name and Port Number Registry.

session-timeout

Configures the time (in seconds) before the session times out..

source-port

Configures the source port.

sync-connections-on-cluster

In a cluster, controls whether to synchronize connections with this service.

sync-delay-enable

In a cluster, controls whether to delay synchronization of connections with this service.

use-source-port

Use source port.

Example Command

set service-system-default FTP port 8080-8090 disable-inspection true session-timeout 15 use-source-port false source-port 8080 keep-connections-open-after-policy-installation true sync-connections-on-cluster true sync-delay-enable true delay-sync-interval 15 aggressive-aging-enable true aggressive-aging-timeout 15