> Source: [sk41490](https://support.checkpoint.com/results/sk/sk41490)

# sk41490 - How do I allow FTP on ports other than port 20 and 21?

| Property | Value |
|----------|-------|
| Solution ID | sk41490 |
| Date Created | 2009-04-19 |
| Last Modified | 2015-06-30 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Solution

In FireWall-1 NG and above, create a TCP service of type FTP using the appropriate control port. For example, support the FTP server in question is configured to use port 3000.   

<br />

<br />

Perform the following steps  

<br />

<br />

1. Open the Services window (Manage \>Services).  

2. Double click on TCP Services  

3. Create a new TCP service. Call it, for example, "ftp-new"  

4. In the "Port" field, configure it to 3000  

5. Go the Advanced tab and set protocol type to FTP.  

6. Add a new rule with the "ftp-new" Service as follows:

Source: Any  

Destination:FTP Server (configured to Port=3000)  

Service:"ftp-new"  

Action:Accept

<br />

<br />

7. Install the Policy.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content