Stuck to the option to connect

Jonathan 480 Reputation points
2026-11-06T09:59:21.7233333+00:00

Hi,

I got connection issue to my Windows FTP server. How to do this:

On filezilla How to witch to the Advanced tab: • Look for the Explicit TLS hostname or similar SNI setting option.

Windows for business | Windows Server | Networking | Network connectivity and file sharing
0 comments

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-11-06T10:00:09.4366667+00:00

    FileZilla Client does not provide a separate “Explicit TLS hostname” or SNI override on the Advanced tab; configure the server’s DNS hostname and explicit FTPS mode on the General tab instead.^1^

    Configure FileZilla

    1. Open FileZilla Client.
    2. Select File → Site Manager.
    3. Select the existing site or click New site.
    4. On the General tab, configure:
      • Protocol: FTP - File Transfer Protocol
      • Host: the DNS name covered by the server certificate, such as ftp.contoso.com
        Do not use the server’s IP address unless the certificate includes that IP.
      • Port: 21
      • Encryption: Require explicit FTP over TLS
      • Logon Type: select the type required by the server.
      • User/Password: enter the FTP account credentials.
    5. Click Connect.

    Explicit FTPS normally starts on port 21 and then negotiates TLS and secondary data-channel ports. Port 990 is associated with legacy implicit FTPS.^2^ FileZilla’s TLS behavior is tied to the hostname configured for the connection rather than a separate Advanced-tab SNI field.^3^

    If the certificate prompt names a different server, correct the Host value or install a certificate whose Subject Alternative Name covers the FTP hostname. Do not permanently trust a mismatched certificate merely to bypass the warning.

    If the Windows IIS server does not accept explicit FTPS

    On the server:

    1. Open Internet Information Services (IIS) Manager.
    2. Expand server name → Sites, then select the FTP site.
    3. Open FTP SSL Settings.
    4. Select the correct certificate.
    5. Under SSL Policy, choose:
      • Require SSL connections if all clients must use FTPS, or
      • Allow SSL connections while testing.
    6. Click Apply.

    IIS supports separate SSL policies for the control and data channels through Custom → Advanced when that distinction is required.^2^

    If login succeeds but directory listing times out

    That symptom usually concerns the passive FTP data channel rather than the TLS hostname setting. Configure one fixed passive range consistently:

    1. In IIS Manager, select the server-level node.
    2. Open FTP Firewall Support.
    3. Enter a restricted Data Channel Port Range.
    4. Select the FTP site, open FTP Firewall Support, and enter the firewall’s external IPv4 address where applicable.
    5. Allow TCP port 21 and the selected passive range through Windows Firewall and any upstream firewall/NAT device.
    6. Restart Microsoft FTP Service.

    Microsoft documents that the passive range must also be permitted by the firewall and that FTPS requires different firewall handling because encrypted FTP traffic cannot be inspected as ordinary FTP.^4^

    References

    1. Site Manager - FileZilla Wiki
    2. FTP over SSL <ssl>
    3. FTP over TLS - FileZilla Wiki
    4. Configuring FTP Firewall Settings in IIS 7
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

  2. Ronald Sabiiti 1,670 Reputation points Independent Advisor
    2026-11-06T10:50:30.4466667+00:00

    Hi Jonathan,

    In FileZilla Client, the Advanced tab is found in the Site Manager, not in the main connection window. To configure your FTP connection, please follow these steps:

    1. Open FileZilla Client and select File > Site Manager (or press Ctrl + S).
    2. Select your existing FTP site or click New Site.
    3. Under the General tab, configure:
    • Protocol: FTP - File Transfer Protocol
    • Encryption: Require explicit FTP over TLS
    • Host: Enter your FTP server's hostname (FQDN), preferably matching the TLS certificate.
    • Port: 21 (unless configured differently).

    4.Enter your FTP username and password, then click Connect.

    5.Verify the server certificate when prompted.

    Note: The Advanced tab does not normally contain a separate SNI or Explicit TLS hostname setting. Using the correct server hostname in the General tab allows FileZilla to send the appropriate SNI information.

    For additional guidance, refer to:

    If the connection still fails, please share the FileZilla message log and client version so we can investigate further.

    If this answer was helpful, please Accept the Answer and consider upvoting it. Doing so helps other community members identify useful solutions to similar issues.

    Thank you for choosing Microsoft Q&A.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.