Dynamic Ports

•
Enable FTP Transformations for TCP port(s) in Service Object – FTP operates on TCP ports 20 and 21 where port 21 is the Control Port and 20 is Data Port. However, when using non-standard ports (for example, 2020, 2121), SonicWall drops the packets by default as it is not able to identify it as FTP traffic. The Enable FTP Transformations for TCP port(s) in Service Object option allows you to select a Service Object to specify a custom control port for FTP traffic.

To illustrate how this feature works, consider the following example of an FTP server behind the SonicWall listening on port 2121:

a
On the Network > Address Objects page, create an Address Object for the private IP address of the FTP server with the following values:
•
Name: FTP Server Private
•
Zone: LAN
•
Type: Host
•
IP Address: 192.168.168.2
b
On the Network > Services page, create a custom Service for the FTP Server with the following values:
•
Name: FTP Custom Port Control
•
Protocol: TCP(6)
•
Port Range: 2121 - 2121
c
On the Network > NAT Policies page, create the following NAT Policy, and on the Firewall > Access Rules page, create the following Access Rule

d
Lastly, on the Firewall Settings > Advanced page, for the Enable FTP Transformations for TCP port(s) in Service Object select the FTP Custom Port Control Service Object.
•
Enable support for Oracle (SQLNet) - Select this option if you have Oracle9i or earlier applications on your network. For Oracle10g or later applications, it is recommended that this option not be selected.

For Oracle9i and earlier applications, the data channel port is different from the control connection port. When this option is enabled, a SQLNet control connection is scanned for a data channel being negotiated. When a negotiation is found, a connection entry for the data channel is created dynamically, with NAT applied if necessary. Within SonicOS, the SQLNet and data channel are associated with each other and treated as a session.

For Oracle10g and later applications, the two ports are the same, so the data channel port does not need to be tracked separately; thus, the option does not need to be enabled.

•
Enable RTSP Transformations - Select this option to support on-demand delivery of real-time data, such as audio and video. RTSP (Real Time Streaming Protocol) is an application-level protocol for control over delivery of data with real-time properties.