The File Transfer Protocol (FTP) service in OneFS can run in active or passive mode. By default, the OneFS FTP service runs in passive mode, which conflicts with how the host-based firewall runs. Before enabling the firewall, enable active mode for the FTP service, with the isi ftp setting modify --active-mode true command. Depending on the FTP client types, converting to active mode might be required.