> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safesquid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FTP browsing

The **FTP** section configures global FTP-over-HTTP gateway behaviour. There is no policy list — only global fields.

## Core mechanics

### Anonymous credentials

When the client sends no username, SafeSquid substitutes **Username** and **Password** from this section before USER/PASS.

### Passive mode

When on, PASV data connections; when off, PORT/active with local bind on the same interface as the control connection.

### Sort defaults

Directory HTML listings use **Sort field** and **Sort order** when the client does not pass CGI sort parameters.

<Frame caption="FTP login path">
  <img src="https://mintcdn.com/safe-squid-labs-12a0916f/VRx-_vpMam8ezhZz/images/admin_guide/ftp_browsing_flowchart.svg?fit=max&auto=format&n=VRx-_vpMam8ezhZz&q=85&s=7e41d4a0abc9f4b56f1f999c2daff7a9" alt="FTP protocol flow" width="480" height="280" data-path="images/admin_guide/ftp_browsing_flowchart.svg" />
</Frame>

## Global fields

* **Passive mode** — PASV vs PORT data transfer.
* **Timeout** — Control read timeout; 0 uses OS TCP keepalive interval.
* **Username / Password** — Anonymous defaults when client omits credentials.
* **Sort order / Sort field** — Default directory listing order (name, size, date).

## Examples

Open **Configure → Application Setup → FTP browsing**. A single Global screen holds Passive mode,
Timeout, Username/Password for anonymous login, and Sort order/field — no row list.

<Frame caption="FTP browsing — Global fields">
  <img src="https://mintcdn.com/safe-squid-labs-12a0916f/xUbSVUmS93A4aMLc/images/admin_guide/ftp_browsing-global.webp?fit=max&auto=format&n=xUbSVUmS93A4aMLc&q=85&s=3c6467f515615a371f9cbc6fa2aebb58" alt="SafeSquid console showing FTP browsing global fields with Passive mode and anonymous login defaults, the Edit Policy icon circled" width="1440" height="700" data-path="images/admin_guide/ftp_browsing-global.webp" />
</Frame>

<Tip>
  ### Anonymous behind firewall

  **Config:** passive on, anonlogin anonymous.

  **Result:** PASV data channel; listing and download without client credentials.
</Tip>

<Tip>
  ### Access denies FTP

  **Config:** FTP globals normal; Access lacks proxy/FTP for client.

  **Result:** Denied before FTP settings apply.
</Tip>

## How to verify

1. Open `ftp://` URL through proxy in browser.
2. Toggle passive if LIST works but RETR fails.
3. Check Detailed logs and REQUEST native logs.


## Related topics

- [Architecture and request pipeline](/admin_guide/start_here/architecture.md)
- [System-Wide Proxy Settings](/getting_started/client_configuration/system_wide_proxy.md)
- [Request Profiles](/use_cases/profiling_engine/request_profiles.md)
- [Welcome to SafeSquid](/getting_started/welcome.md)
- [Block Inappropriate Images by Using Image Analyzer](/use_cases/data_leakage_prevention/block_inappropriate_images_by_using_image_analyzer.md)