Hello,

This is my first post but I've been a long time visitor. I just started a new job last week as a project coordinator and I have an issue on my plate that I need to solve.
I work for a global company that has many different facilities all over the world with with thousands upon thousands of users. The task is to lock down FTP traffic (port 21) for all users and try to add rules and such depending on the software or sites our users use so they can get out to transfer files when needed. What I found though was that this isn't really feasible because our members deal with thousands of other customers which all have different sites and software they use at any given time, and it is dynamically different on any given day.
One thought that I had was to have our users go out to like our intranet site and actually "open up" the port for a given amount of time (say an hour) by sending some active form that would open it up for them with the correct information. After the hour is up it would go back into a closed state. Could this be possible with the right programming/hardware?
Sorry, I do not really know yet what kind of firewalls we use to open/block. I assume it would be Cisco. I just started meeting with the firewall team and I haven't gathered this info quite yet. I am just hoping this works because it would save a lot of headaches.

Thanks