• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

FTP access using isa server 2006 as proxy

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Access Policies >> FTP access using isa server 2006 as proxy Page: [1]
Login
Message << Older Topic   Newer Topic >>
FTP access using isa server 2006 as proxy - 9.Jan.2007 11:00:15 AM   
martyynster

 

Posts: 3
Joined: 9.Jan.2007
Status: offline
I receive the following error when I try to access to an internet
authenticate ftp server from my network using isa server as proxy:

Error Code: 502 Proxy Error. The login request was denied. The logon
account might have been disabled or logon information might have
changed. Log on again to verify that the information was typed
correctly. If the problem continues, report the problem to the
administrator of the Internet server you are requesting. (12015)
IP Address: xxx.xxx.xxx.xxx
Date: 09/01/2007 13.02.57 [GMT]
Server: xxx
Source: xxx


tnk.
Post #: 1
RE: FTP access using isa server 2006 as proxy - 19.Jan.2007 1:56:53 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Is the machine configured as a Web proxy client?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to martyynster)
Post #: 2
RE: FTP access using isa server 2006 as proxy - 19.Jan.2007 3:17:35 PM   
z_haseeb

 

Posts: 209
Joined: 15.Jun.2005
From: Karachi,Pakistan
Status: offline
HI martyynster

How you can say that this is the problem from your ISA.......
Is that problem also facing your other network users?
have you tried any other FTP server(if you have a chance) that FTP server also giving you the same error?

(in reply to tshinder)
Post #: 3
RE: FTP access using isa server 2006 as proxy - 22.Jan.2007 10:08:58 AM   
martyynster

 

Posts: 3
Joined: 9.Jan.2007
Status: offline
I have the error when I try to connect to all authenticate  internet ftp server. On the client it doesn't appear the pop-up that require user name and password for access to ftp server.
I have already tried to install firewall client on my client but the result is not changed.Do you know if isa server passes through proxy the POP-UP for ftp authentication?

tnk. 

(in reply to z_haseeb)
Post #: 4
RE: FTP access using isa server 2006 as proxy - 22.Jan.2007 10:26:04 AM   
z_haseeb

 

Posts: 209
Joined: 15.Jun.2005
From: Karachi,Pakistan
Status: offline
ftp traffic is allowed on your ISA?

_____________________________

Thanks
Zahid Haseeb

MCP, Veritas Netbackup6.5 certified
Interest ISA Server2004/2006, SHFA, VVR

(in reply to martyynster)
Post #: 5
RE: FTP access using isa server 2006 as proxy - 22.Jan.2007 11:02:19 AM   
martyynster

 

Posts: 3
Joined: 9.Jan.2007
Status: offline
I have create a rule for ftp access from internal network to external.
For unauthenticate ftp server as ftp:\\ftp.dlink.com it works correctly.

(in reply to z_haseeb)
Post #: 6
RE: FTP access using isa server 2006 as proxy - 31.Jan.2007 11:07:07 AM   
jasonmlloyd

 

Posts: 5
Joined: 12.Jul.2004
Status: offline
I have the exact same issue.

ISA 2006 on a Windows 2003R2 server.  ISA is configured with a single NIC and we have a PIX firewall.  Client using IE7 (not sure if IE6 affected).  Connecting to a FTP site which allows anonymous connections (ftp://ftpav.ca.com) works fine.  Connecting to any FTP site which requires the authentication pop-up results in the ISA server 'denied' error page.

Initial logging suggested a 'block audio' content type filter was stopping connections from the client.  When I stopped this a 'block video' filter stopped the connections.  Both these filters simply denied the relevant Content type.

After disabling the filters it still fails, but logging lists Action as 'Failed Connection'.

I have tried unchecking Passive FTP on the IE7 Advanced tab. I have allowed traffic from localhost for All users and I can connect from the ISA server from a command line, so I know the site is okay.  I can connect from IE on the ISA if I do not specify a proxy.  If I specify a proxy, it fails again.  Clients can connect directly if they have direct access through the PIX.  I have stopped FTP caching and I have disabled the FTP Access Filter, with no effect.

It seems like ISA does not like something in the Authentication element of FTP, but I'm stumped about what.  I still have an ISA 2004 server on another site, so I'll double check through that, but I suspect it will be okay.

Any ideas anyone??


NB: Tested a dual NIC ISA2004 server on Windows 2003 and it works perfectly.

NB2: Tested IE6 client through ISA 2006 and it works okay.  It appears the problem is when connecting to an authenticated FTP site from IE7 through ISA2006.  I tried adding the FTP site to the trusted sites list, but no joy.

< Message edited by jasonmlloyd -- 31.Jan.2007 12:04:22 PM >

(in reply to martyynster)
Post #: 7
RE: FTP access using isa server 2006 as proxy - 31.Jan.2007 2:04:24 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hey guys,

check out About the FTP Protocol Support in ISA Server.

HTH,
Stefaan

(in reply to jasonmlloyd)
Post #: 8
RE: FTP access using isa server 2006 as proxy - 21.Feb.2007 10:50:59 AM   
dljones10

 

Posts: 4
Joined: 14.Nov.2006
Status: offline
I was wondering if Jason ever found an answer to his problem.  I am having the same issues with IE7 and ISA 2004.  I keep getting the "502 Proxy Error. The login request was denied." when trying to access a particular ftp site that requires authentication.  I have tried all the IE7 settings that are stated in Stefaan's article. 

I can access the ftp site through IE6 and the command line.

Any help would be appreciated.

Thanks

Dave

(in reply to jasonmlloyd)
Post #: 9
RE: FTP access using isa server 2006 as proxy - 23.Feb.2007 3:09:30 PM   
ninjitsu

 

Posts: 1
Joined: 23.Feb.2007
Status: offline
I've found it helps in Ie7 to enter the FTP site like this "ftp://[user]:[password]@[site]" .  the 502 error occures because the ISA tries to log on to the ftp server probably anonymously and fails.

However using this I still get
"ISA Server: extended error message :
200 TYPE is now ASCII

200 PORT command successful

425 Could not open data connection to port 2821: Connection refused "

which does mean that IE7 successfully connected to the FTP server but still fails to fully initailize I belive because IE7 isn't in Pasv mode like it should be.

If anyone has seen this and knows a work around. please let me know.

(in reply to dljones10)
Post #: 10
RE: FTP access using isa server 2006 as proxy - 7.Mar.2007 6:30:26 PM   
provtcnelson

 

Posts: 9
Joined: 12.Feb.2007
Status: offline
Hi,

I was having this issue in IE7 also, but I found after getting the ISA block page, if you select the IE7 'page' dropdown and select 'Open FTP site in Windows Explorer' the authentication box does come up and it works OK through the Explorer view. Sounds like IE7 issue to me

Tom

(in reply to ninjitsu)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Access Policies >> FTP access using isa server 2006 as proxy Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts