• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

FTP Access using FW Client

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> FTP Access using FW Client Page: [1]
Login
Message << Older Topic   Newer Topic >>
FTP Access using FW Client - 19.Apr.2003 12:31:00 PM   
Liteswitch

 

Posts: 44
Joined: 14.Aug.2002
From: Manchester
Status: offline 		good morning all,

How do I cofnigure ISA so that it allows FTP traffic from firewall clients to external FTP Servers so that they can upload and download form them? I've tried numerous things, and haven't had any luck..

Thanks
Post #: 1
RE: FTP Access using FW Client - 19.Apr.2003 1:21:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Liteswitch,

just make sure the FTP application filter is enabled en that the FTP protocol is allowed in a protocol rule. For more info, check out http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html .

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 2
RE: FTP Access using FW Client - 19.Apr.2003 3:58:00 PM   
Liteswitch

 

Posts: 44
Joined: 14.Aug.2002
From: Manchester
Status: offline 		Do you mean create a protocol rule using the FTP protocol definition? Do I need to create a FTP Packet filter or do anything else as well?

(in reply to Liteswitch)
Post #: 3
RE: FTP Access using FW Client - 19.Apr.2003 4:25:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Liteswitch,

you don't need to create packet filters. In fact, protocol and site&content rules will create the necessary packet filters *dynamically* when needed.

So, check out that in the ISA mmc, node Extension -> Application Filter, the FTP Access Filter is enabled. Then go to node Access Policy -> Protocol Rules and make sure there is an Allow Protocol Rule for which the FTP protocol is enabled in the Protocol tab.

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 4
RE: FTP Access using FW Client - 21.Apr.2003 11:10:00 PM   
shanes

 

Posts: 1
Joined: 21.Apr.2003
From: Iowa
Status: offline 		Does this also apply tp passive mode ftp?

(in reply to Liteswitch)
Post #: 5
RE: FTP Access using FW Client - 21.Apr.2003 11:34:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Shane,

yes! The FTP application filter supports active and passive mode FTP.

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 6
RE: FTP Access using FW Client - 1.May2003 10:52:00 AM   
Guest
 I have done all this but still cannot get clients ftp. From the ISA server It works fine, I can browse any FTP site. Any suggestions. Thanks Durga Datt ddatt@sinnottbros.com.au

(in reply to Liteswitch)
  Post #: 7
RE: FTP Access using FW Client - 1.May2003 10:58:00 AM   
Guest
 I am also having exactly the same problem...please help !

(in reply to Liteswitch)
  Post #: 8
RE: FTP Access using FW Client - 1.May2003 7:35:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hey guys,

can you better describe your exact problem? What ISA client types do you use? What FTP client do you use?

BTW --- don't test it from ISA server itself. You should test from an internal client!

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 9
RE: FTP Access using FW Client - 19.May2003 3:03:00 PM   
Liteswitch

 

Posts: 44
Joined: 14.Aug.2002
From: Manchester
Status: offline 		right, I have my PC's using Firewall client to connec through ISA server. The FTP application filter is enabled, and I have created a rule to allow the FTP protocol through. In the configuration of my FTP client (CuteFTP) I told it to use a Proxy server (the internal IP of my ISA) on port 21. IS this correct?

(in reply to Liteswitch)
Post #: 10
RE: FTP Access using FW Client - 19.May2003 8:40:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Liteswitch,

do *not* configure the FTP client for a proxy/firewall. The Firewall client will transparently intercept the request and redirect them to the Firewall service on ISA server.

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 11
RE: FTP Access using FW Client - 20.May2003 3:58:00 PM   
GuiJah

 

Posts: 4
Joined: 20.May2003
From: France - Brittany - Vannes
Status: offline 		hello evrybody

i'd a ISA Server running on my domain, I've configure d the protocols rules to allow FTP protocols.

The clients is a PC of the same domain which is running the FW client.

I've no problem to browse FTP site with any clients even the command line ftp, BUT I can't with IE (version 5) when i get on the site, i'm logged as an anonymous user but when my browser try to list the site, it don't work, i wait and wait and after a moment it says that it's impossible because of the timeout.

I don't understand why, help please.

(in reply to Liteswitch)
Post #: 12
RE: FTP Access using FW Client - 20.May2003 7:46:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi GuiJah,

check out the following articles:
- http://www.isaserver.org/tutorials/Issues_with_the_Internet_Explorer_FTP_Client.html
- http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html , more specifically section 4.4. Web Proxy client.

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 13
RE: FTP Access using FW Client - 21.May2003 10:03:00 AM   
GuiJah

 

Posts: 4
Joined: 20.May2003
From: France - Brittany - Vannes
Status: offline 		thanks a lot spouseele

it run without any problem.
I apologize for not having found this article before.

(in reply to Liteswitch)
Post #: 14
RE: FTP Access using FW Client - 21.May2003 11:07:00 AM   
Liteswitch

 

Posts: 44
Joined: 14.Aug.2002
From: Manchester
Status: offline 		thanks, I'll check my FTP client when I get chance, and tell it not to use a firewall/proxy. Hope it works!

(in reply to Liteswitch)
Post #: 15
RE: FTP Access using FW Client - 21.May2003 9:07:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi GuiJah,

good to hear you got it working and thanks for the follow up! [Smile]

Stefaan

(in reply to Liteswitch)
Post #: 16
RE: FTP Access using FW Client - 21.May2003 9:09:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Liteswitch,

it should work! [Big Grin]

HTH,
Stefaan

(in reply to Liteswitch)
Post #: 17

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> FTP Access using FW Client Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts