Welcome to ISAserver.org

RE: FTP access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> RE: FTP access

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: FTP access - 25.Nov.2005 6:50:02 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi bhavin78,

quote:

WP only suppport Http and Https even thoug you can add FTP as list of protocols its not supported

Don't quote me wrong! The Web Proxy client supports FTP through HTTP. That means that the client talks HTTP to the Web Proxy component on ISA and that the ISA server will talk FTP to the real destination. However, there are some technical limitations. Check out section 4.4. Web Proxy client in my article http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html for more info.

I have personally no experience with yahoo messenger but if this application doesn't talk HTTP then it won't work as a Web Proxy client.

HTH,
Stefaan

(in reply to bhavin78)

Post #: 21

Featured Links*

RE: FTP access - 30.Nov.2005 3:19:18 PM

bhavin78

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline

I tried one more thing I configured two policy one for alluser and one for AD selected user. Both policy allows both http and ftp.

I configured client as webproxy and secureNat.

when AD User Policy is above all user policy
FTP connection with ftp client fails with error (reset connection)

when alluser Policy is above AD user policy
FTP connection with FTP client works.

is it possible to make FTP connection with FTP client work with some kind of configuration with out Firewall client?

(in reply to LLigetfa)

Post #: 22

RE: FTP access - 13.Feb.2006 8:11:55 PM

bhavin78

Posts: 429
Joined: 18.Jul.2005
From: USA
Status: offline

I installed firewall client on test PC and know even ftp client program works but webproxy user cannot open ftp://ftp.microsoft.com, why? they should be able to atleast open ftp sites from IE. Only one Access rule is defined. allow http,https,ftp,ftps and protocol to user in internet access group of AD.

(in reply to LLigetfa)

Post #: 23