sftp(SSH) filters over port 22

[Moderator]

I am having terrible trouble setting up a sftp(SSH)(over port 22) packet forwarding filter on our border 3.7 server.

As far as I know the only criteria required to connect to the remote sftp(SSH) server are:
(1) The remote sftp(SSH) server requires the public IP address of our border server - I have been assured this has been done.
(2) We need to open port 22 (outgoing) at this end to allow the sftp server to accept connections from our site.

Does anyone have any idea if I can do this using one filter or does sftp(SSH) require a series of filters?

Any help will be greatly appreciated.
Cheers,
Mod

 

[Provogeek]

You also need a filter exception for response.

It would be easier to just use one filter excpetion and enable statfull filtering, that way the response filter excpetion will pretty much be dynamic and will open and close as needed.

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer

http://www.kiscc.com

http://www.bluegunk.com