Welcome to ISAserver.org

FTP and ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> FTP and ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

FTP and ISA 2004 - 23.Nov.2007 3:17:40 AM

techit

Posts: 1
Joined: 21.Nov.2007
Status: offline

I have the following setup

Client PC => Layer 3 Switch => ISA server internal network=> ISA External (no public address = > Firewall Checkpoint => internet

The ISA is NO default gateway

For test a haven setup the rule internal to external ,protocol FTP HTTP and https , any user

Client can connect trough ISA with IE or Firefox with HTTP and HTTPS
Client cannot connect with FTP ( also no connectio seen in de ISA looging)

With ISA client firewall everthings works fine

I cannot set a public ip-addresses to my ISA it is Natted true my checkpoint

Does anyone have solution ?

Thanks a lot
Steve

< Message edited by techit -- 23.Nov.2007 3:32:03 AM >

Post #: 1

Featured Links*

RE: FTP and ISA 2004 - 23.Nov.2007 3:21:24 PM

mkguy

Posts: 13
Joined: 24.Oct.2007
From: Germany
Status: offline

This quite sounds like your browser is attempting to establish a direct connection on port 21 to the FTP server. Since your ISA is no default gateway, you won't see any FTP traffic in ISA logging, but on your checkpoint.
In order to use FTP with the ISA as proxy (FTP over HTTP), make sure Internet Explorer is configured the use your ISA Server for FTP on Port 80 and disable the folder view for FTP sites in the IE advanced tab.
Using these settings, your client should forward the FTP commands in HTTP GET requests destined at your ISA server, which will pick them up and establish the actual FTP connection to the destination.

(in reply to techit)

Post #: 2

RE: FTP and ISA 2004 - 15.Feb.2008 4:16:23 AM

arulthas

Posts: 7
Joined: 7.Jun.2004
From: Malaysia
Status: offline

hi mkguy, i have similar problem as techit and tried your resolution but the results still the same. I checked with my network team and they notify that client is trying to connect direct to the ftp site bypassing isa although the proxy setting is set correctly in IE.

/Arulthas.

(in reply to mkguy)

Post #: 3