The NSG associated to a subnet is not required/mandatory. It's not a problem if there isn't any NSG on the subnet.
This is a how-to "how to configure FTP Server on an Azure Windows VM". Maybe you could verify the step-by step how-to with your configuration.
https://getanadmin.com/azure/configure-ftp-server-on-azure-virtual-machine/
(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards