yes, can be eq ftp, however no need for the second part at all.actually, there is no need to have separate config for active or passive. ACE can take care of the translation of embedded ip and can proxy the corresponding second channel well for both...