03-11-2009 08:54 PM
03-11-2009 11:38 PM
In the ScreenOS 6.1.0r5 Release Notes, http://www.juniper.net/techpubs/software/screenos/screenos6.1.0/rn_610_r5.pdf, I see a potentially related fix:
302566—When NAT source and destination is configured in the same policy,
passive FTP fails.
1. I would upgrade your SSG to ScreenOS 6.1.0r5.
2. If the problem is still happening, please include the output of 'get policy id <id>'.
Let us know how it goes,
03-12-2009 07:24 AM
03-16-2009 02:20 AM
Try to make sure there is no other (personal) firewall in between.
Then check if ALG for FTP is enable (globally and for the policy), like suggested.
Do a debug to see what happens.