Configuring FileZilla to use Generic proxy settings to access over ProxySG

book

Article ID: 170062

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

Configuration steps needed to configure ftp client FileZilla to access through an explicit proxy by using the “Generic proxy” option.

Environment

Customer needs to access an FTP server using an Explicit proxy by relaying to HTTP CONNECT

Resolution

Configuration needed on the FileZilla client

  • Open FileZilla application
  • Click Edit > Settings…
  • Select “Generic proxy” and configure as in the below screenshot with values appropriate. Note: FileZilla will only support Basic authentication. If proxy is using any other mode of authentication, extra rules will be needed to bypass authentication for the ftp server accessing

  • Also raise the timeout from the default value of 20 seconds to minimum of 60 seconds as proxy processes can add slight delay to the ftp access. Below screenshot shows the settings

 

Configuration needed on ProxySG(Optional)

  • Rule to allow access to the ftp server (IP Address or Domain) as required by the policy
  • Rule to Authenticate or Bypass authenticate
  • If ftp server access is over an IP address, an RDNS lookup could be initiated by the proxy. This could add delay to the access if the DNS servers are not responding timely or there is no RDNS mapping for the server IP. Follow article TECH242050
  • Note: If Detect Protocol is enabled in ProxySG, there could be a 30 second delay when proxy tries to detect the underlying protocol Ref# TECH243102. If need to avoid this, policy to bypass detect_protocol can be added. CPL example below

<Proxy>
url.domain=ftp.symantec.com detect_protocol(no)

Attachments