Welcome to ISAserver.org

Active mode FTP client problem on ISA 2004 ENTERPRISE ED

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Active mode FTP client problem on ISA 2004 ENTERPRISE ED

Page: [1]

Message

<< Older Topic Newer Topic >>

Active mode FTP client problem on ISA 2004 ENTERPRISE ED - 12.Jul.2005 4:42:00 AM

lcasti

Posts: 10
Joined: 12.Jul.2005
Status: offline

Hi,
i know that this problem has been already been solved on isa 2004 standard, as reported on microsot KB884580 , but, the same problem arise again on the ENTERPRISE EDITION.

I have just migrated from isa standard to isa enterprise, and now i have this urgent problem. While i wait an official reply from Microsoft support, has anybody some idea on how to solve this?

Thanks!
Luca.

Post #: 1

Featured Links*

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 14.Jul.2005 9:58:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Luca,

The KB article includes a workaround, have you tried it?

Thanks!
Tom

(in reply to lcasti)

Post #: 2

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 14.Jul.2005 10:08:00 AM

lcasti

Posts: 10
Joined: 12.Jul.2005
Status: offline

Hi Tom,
the workaround suggested by the KB article is to use the PASV mode. This is ok, and i agree on the fact that when passing on a firewall is best to use the FTP PASSIVE mode.

But i have some users that has written some script that use the standard "ftp.exe", that don't support the PASV mode, and the users told me the usual "but yesterday worked (isa standard) and today not (isa ee)"....

So, i prefer to have this problem fixed on the isa server. I'm in contact with the microsoft PE (proactive essential), hope they help me soon.

I'll keep you informed.
L.

(in reply to lcasti)

Post #: 3

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 14.Jul.2005 4:22:00 PM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Luca,

KB884580 was fixed in ISA SE SP1. I thought that ISA Enterprise was at the same level as ISA SE SP1. Isn't that true?

Thanks,
Stefaan

(in reply to lcasti)

Post #: 4

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 18.Jul.2005 5:51:00 AM

lcasti

Posts: 10
Joined: 12.Jul.2005
Status: offline

Hi Stefaan,
based on my test the problem is not 100% fixed on isa 2004 ee. I tried connecting to ftp.microsoft.com using the standard ftp.exe (fom xp professional machine + firewall client installed from isa 2004 ee) and when you do a "dir" you have no response.
If you do the same thing directly from the isa2004 ee machine, it works!

I noticed that the dll version of the firewall client is different between isa 2004 pro and ee.

Firewall client installed from isa 2004 EE:

FwcRes.dll 4.0.3439.50
FwcWsp.dll 4.0.3439.50

Firewall client installed from isa 2004 std SP1:

FwcRes.dll 4.0.3440.81
FwcWsp.dll 4.0.3440.81

Maybe this has something to do with the anomaly??

Luca.

ps: still waiting response from microsoft tech supp.

(in reply to lcasti)

Post #: 5

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 18.Jul.2005 2:26:00 PM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Luca,

what happens if you try it from a SecureNAT client?

HTH,
Stefaan

(in reply to lcasti)

Post #: 6

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 19.Jul.2005 3:41:00 AM

lcasti

Posts: 10
Joined: 12.Jul.2005
Status: offline

SOLVED!

The problem was that between the isa ee internat interface (phisical+nlb) was activated an access list on a hardware firewall. I guess what are you tkinking now: "why another firewall, is isa not enough?".

Unfortunately no, for a lot of "networking-cisco-people" not. They prefer to use ONLY hardware firewall and they consider isa stuff insecure etc etc.

A lot of people are really closed-mind, they don't understand the benefit that can isa 2004 provide in term of authentication and manageability....

Thanks for reading, and for help!
Luca.

(in reply to lcasti)

Post #: 7

RE: Active mode FTP client problem on ISA 2004 ENTERPRI... - 21.Jul.2005 1:46:00 PM