Simple question, why ISA2006 server is denying all web clients to access a certain ftp server through a third party software ( isa log shows that ftp denied by enterprise default rule on port 21 ), on the other hand, all firewall clients can just connect smoothly, web & firewall clients are in same group ( same access rules applies to them)....so why is the Enterprise Default rule denying ftp to web clients and not firewall clients ???
Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,
web proxy clients can handle only FTP over HTTP (FTP read-only).
You probably using user-based access rules, thatīs the reason your clients could not connect using the FTP software, unless you have the FWC installed.
web proxy clients can handle only FTP over HTTP (FTP read-only).
You probably using user-based access rules, thatīs the reason your clients could not connect using the FTP software, unless you have the FWC installed.
which rule do you mean?? i added the all users to my firewall rule instead of authenticated users and didn't work, and of course i cant edit anything in the enterprise default rule !
Allow aceess to webusers group from internal to external for all protocols all the time, so basically it is allowing everything but for a certain group which myself is a member of.
My clients are web clients and not NAT clients if that what you are asking for ( client machines gateways not configured as isa internal NIC)....
I tried to give access in my rule to all users instead of a certain group (web users) but this didn't work ( while monitoring traffic from my machine i still see that ftp on port 21 is denied from Enterprise default rule on isa ....
And that's the main point, its not the firewall rule denying but the enterprise default rule and that's what exactly is confusing me !!!!
Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,
the problem I see here is that youīre not understanding the different types of ISA clients. Please read this for a better understanding: Internal Client Concepts in ISA Server 2006
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Printable Version
All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> ftp denied by enterprise default rule 
ftp denied by enterprise default rule - 
New Messages
No New Messages
Hot Topic w/ New Messages
Hot Topic w/o New Messages
Locked w/ New Messages
Locked w/o New Messages
Post New Thread