Thanks Cesare I cannot edit the front-end directly, the device is managed with a security profile on the management console; otherwise you would be correct. What I’ve done since is add an exception to the firewall for TCP/21 & TCP/20 and included ftp.exe as a virus scan exclusion (Advanced > Threats and Exclusions). But still not working :( From what I can see, these are the only 2 places that I can add exceptions/rules. Any other suggestions?