Have a look at this: Setting up FTPS server for VCSA backup | vmninja
For FTPS, not only port 21/tcp must be open, since VCSA uses passive mode. I bet there's something wrong with a firewall (maybe Windows Firewall). That's why I asked for routing and firewall. So, again, is there any firewall in between?