Distant end says that we need to use Active/Port mode

Have to check if we are using implicit

Firewall has been open for port 990 and data 989

But thank for the info I will double check

Hi ok at least we are moving in the right direction. I can now connect to port 990 but the data port 989 isn't working. Unable to transfer files or do a simple directory. Both ports are open on the firewall and I do see on port 990 the hitcount go up but not on port 989

On your FTPS client, can you try Active and Pasive mode to see which one works?

I suggest you to do a sniffer on client side to see what happens?

sorry I've should of put that down, yes we tried both passive and active and implicit/explict and none work. Going to try to enable ports 1024 and higher instead of port 989 and see what happens

We have resolved the issue, this is what we did to fix the FTPS issue.

Problem:

When using FTPS to connect on ports 990 and 989 we can make the initial connection to port 990 but the data port 989 doesn't work. Symptoms are we cannot do a file transfer or do a simple directory lookup.

Solution:

Instead of opening up the data port 989 what was done to fix it was use a random port of anything higher than 1024. In this case we used port 22333 and changed on the server to listen to port 22333 instead of 989. When we attempted to connect, port 990 worked as usual and then data port 22333 work and we where able to transfer files.

So in short what worked for me for FTPS was using the normal port of

990

and using data port higher than 1024

Thanks for posting the result.

Not sure why it did not work on standard port. It should be related to who will initiate the traffic in data-channel.

Yeah I know I thought it was a silly idea as it didn't make much sense. Everything I read said to use port 990 and 989. Not sure why that didn't work or what I was doing wrong but this seemed to work and we are ftps with out issues now. Thank you for your help on this...much appreciated!!!!!