FTP service accepting unencrypted credentials

[m_k_user]

Hi team
Hi community
I have Security Gateway with multiple FTP service ports opened. Ports are high numbered >33000
Nmap says "Check Point Firewall - 1 ftpd".
The vulnerability scanner says "Remote Management Service Accepting Unencrypted Credentials Detected (FTP)".
Please, help. Could it be a false positive? Like credentials are realy encrypted.
Why so many (about 14) ftp ports are opened?
Should I configure ftpd via expert mode?

[HeikoAnkenbrand · Accepted solution]

By default, no ftp ports are open on the Check Point firewall.

1) Maybe you have NAT rules to internal FTP servers. I would check the NAT rules.
     In this case I would use SFTP or SSH, then the traffic is encrypted. 

2) It may also be that open ports are recognised incorrectly by NMAP. It depends on how you perform the NMAP scan.