Is there a setting somewhere in the Firewall Analyzer to set FTP to allow Active/Passive connections?