> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safesquid.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FTP browsing

<Note>
  CLI man page: `safesquid-ftp(5)`
</Note>

The **FTP** section (`safesquid-ftp(5)`) configures global FTP-over-HTTP gateway behaviour. There is no policy list — only global fields.

## Core mechanics

### Anonymous credentials

When the client sends no username, SafeSquid substitutes **Username** and **Password** from this section before USER/PASS.

### Passive mode

When on, PASV data connections; when off, PORT/active with local bind on the same interface as the control connection.

### Sort defaults

Directory HTML listings use **Sort field** and **Sort order** when the client does not pass CGI sort parameters.

<Frame caption="FTP login path">
  <img src="https://mintcdn.com/safe-squid-labs-12a0916f/VRx-_vpMam8ezhZz/images/admin_guide/ftp_browsing_flowchart.svg?fit=max&auto=format&n=VRx-_vpMam8ezhZz&q=85&s=7e41d4a0abc9f4b56f1f999c2daff7a9" alt="FTP protocol flow" width="480" height="280" data-path="images/admin_guide/ftp_browsing_flowchart.svg" />
</Frame>

## Global fields

* **Passive mode** — PASV vs PORT data transfer.
* **Timeout** — Control read timeout; 0 uses OS TCP keepalive interval.
* **Username / Password** — Anonymous defaults when client omits credentials.
* **Sort order / Sort field** — Default directory listing order (name, size, date).

## Examples

<Tip>
  ### Anonymous behind firewall

  **Config:** passive on, anonlogin anonymous.

  **Result:** PASV data channel; listing and download without client credentials.
</Tip>

<Tip>
  ### Access denies FTP

  **Config:** FTP globals normal; Access lacks proxy/FTP for client.

  **Result:** Denied before FTP settings apply.
</Tip>

## How to verify

1. Open `ftp://` URL through proxy in browser.
2. Toggle passive if LIST works but RETR fails.
3. Check Detailed logs and REQUEST native logs.


## Related topics

- [Architecture and request pipeline](/admin_guide/start_here/architecture.md)
- [System-Wide Proxy Settings](/getting_started/client_configuration/system_wide_proxy.md)
- [Request Profiles](/use_cases/profiling_engine/request_profiles.md)
- [Welcome to SafeSquid](/getting_started/welcome.md)
- [Block Inappropriate Images by Using Image Analyzer](/use_cases/data_leakage_prevention/block_inappropriate_images_by_using_image_analyzer.md)