Automatically created firewall rule FTP Service on IIS node has no port restrictions. It allows access to all TCP ports.
The issue with incorrect firewall rule has been considered as internal software issue #PPA-2686. The fix is included in Plesk Automation MU#21.
Install latest PA updates according to the article.