I don't know about passive ftp, but be assured that I didn't have to do anything special to make this running. Just for curiousity: is your machine a secure nat client? If not so, then disabling the firewall client won't produce any result (as you might know).. Btw, I have a small test network that I use at home, where I have Vshield getting updates via ftp. Here the settings are a bit different. The firewall client is running and I enabled the "passive ftp" checkbox in Automatic Update. Runs nice, too... No special settings for this ISA installation either :-) > -----Original Message----- > From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] > Sent: Wednesday, September 18, 2002 11:20 PM > To: '[ISAserver.org Discussion List]' > Subject: [isalist] RE: Help with Mcafee Problem > > > http://www.ISAserver.org > > > But I'm being told that you have to enable passive ftp in > ISA. How is this suppose to be done? > > Greg Foulks, MCP > NewFound Technologies, Inc. > http://www.nfti.com > Email: greg.foulks@xxxxxxxx > Voice: 614.318.5036 > Fax: 614.318.5005 > > > -----Original Message----- > From: Mark Hippenstiel [mailto:mark@xxxxxxxxxxxx] > Sent: Wednesday, September 18, 2002 4:38 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Help with Mcafee Problem > > > http://www.ISAserver.org > > > Greg, > > We have a win 2k server doing the download job, and all of > the workstations collect their updates from that server via UNC paths. > > The server is not running the firewall client software, but > instead is a secure NAT client. ISA has no special packet > filters, only a protocol rule that allows "internet" access > for the range of server ips via a client address set, the > access rule including "ftp" and "ftp download only" protocols. > > In NetShield, the automatic update is configured to use a > proxy, in the settings box I entered > "http://myproxy.name.net"; port 8080. > > Runs all very nice and smoothly. > > Hope this helps > Mark > > > -----Original Message----- > > From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] > > Sent: Wednesday, September 18, 2002 10:15 PM > > To: '[ISAserver.org Discussion List]' > > Subject: [isalist] RE: Help with Mcafee Problem > > > > > > http://www.ISAserver.org > > > > > > No it's running on a Win2K server and yes I do have the firewall > > client installed. No matter if I enable or disable the > firewall client > > it still will not download the files. > > > > I'll either get the error > > "An unknown error occurred while reading from the remote system and > > the connection was dropped." > > > > or > > > > "Their is no update file in the remote directory" > > > > I've been working with Mcafee now for two weeks and they > continue to > > tell me that the problem is in my ISA configuration. How ever I can > > FTP via command line and by using FTP voyager without any problems. > > > > Greg Foulks, MCP > > NewFound Technologies, Inc. > > http://www.nfti.com > > Email: greg.foulks@xxxxxxxx > > Voice: 614.318.5036 > > Fax: 614.318.5005 > > > > > > -----Original Message----- > > From: Paul Nuernberger [mailto:pen@xxxxxxxxx] > > Sent: Wednesday, September 18, 2002 3:29 PM > > To: [ISAserver.org Discussion List] > > Subject: [isalist] RE: Help with Mcafee Problem > > > > > > http://www.ISAserver.org > > > > > > Questions: > > 1.) Is the McAfee program running on a server or a desktop ? > > 2.) If a desktop, can the firewall software be installed ? > > > > I have a customer running McAfee on a desktop behind ISA (with > > firewall client installed) and it worked right out of the > box with no > > special settings. It gets updates flawlessly. > > > > Paul Nuernberger > > Manager > > Baron Computers > > 618-656-5597 > > > > -----Original Message----- > > From: Greg Foulks [mailto:greg.foulks@xxxxxxxx] > > Sent: Wednesday, September 18, 2002 2:13 PM > > To: [ISAserver.org Discussion List] > > Subject: [isalist] Help with Mcafee Problem > > > > > > http://www.ISAserver.org > > > > > > Can anyone help with this problem I'm having with Mcafee. > They've told > > me I need to configure my ISA server to do the following. I > think I've > > done everything but I want to hear from someone to hear what or how > > they would set this up. > > > > ============================ > > Firewall/Proxy requirements: > > ============================ > > > > Active FTP: Ports 20, 21, and 80 open for inbound and outbound > > traffic. Passive FTP: Ports 20, 21, 80, and all ports 1024 > + open for > > inbound and outbound traffic. Anonymous or Windows logon > > authentication only. No packet filtering enabled. > > > > > > Thanks, > > > > > > Greg Foulks, MCP > > NewFound Technologies, Inc. > > http://www.nfti.com > > Email: greg.foulks@xxxxxxxx > > Voice: 614.318.5036 > > Fax: 614.318.5005 > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > Security Resource Site: http://www.windowsecurity.com/ > Windows 2000/NT > > > Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion > > List as: pen@xxxxxxxxx To unsubscribe send a blank email to > > $subst('Email.Unsub') > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > Security Resource Site: http://www.windowsecurity.com/ > Windows 2000/NT > > > Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion > > List as: greg.foulks@xxxxxxxx To unsubscribe send a blank > > email to $subst('Email.Unsub') > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Exchange Server Resource Site: http://www.msexchange.org/ Windows > > Security Resource Site: http://www.windowsecurity.com/ > Windows 2000/NT > > > Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion > > List as: mark@xxxxxxxxxxxx To unsubscribe send a blank email > > to $subst('Email.Unsub') > > > > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: greg.foulks@xxxxxxxx To unsubscribe send a blank > email to $subst('Email.Unsub') > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Exchange Server Resource Site: http://www.msexchange.org/ > Windows Security Resource Site: > http://www.windowsecurity.com/ Windows 2000/NT > Fax Solutions: > http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: mark@xxxxxxxxxxxx To unsubscribe send a blank email > to $subst('Email.Unsub') >