A lot of those things have a nasty habit to silently (and without documentation) reshape FTP connections to their liking with weird breakage as the usual result.

(Netscreen/Juniper used to kill all FTP connections regardless of the client, SonicWall leaves Windows FTP client alone but throttles APT to death.)

The quickest way out of this is to trace an FTP session on both ends of the connection.