Hi Sebastian, You've gone about this all wrong; you can't use a "custom" protocol definition for FTP; one already exists and is part of the FTP application filter. Delete this custom rule and use the predefined FTP protocol. -----Original Message----- From: Dijk, Sebastian van [mailto:sebastian.van.dijk@xxxxxxxxxx] Sent: Tuesday, February 22, 2005 12:13 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: outgoing client ftp problem through isa 2000 http://www.ISAserver.org Hey Guys, I am still having this weird problem : When firewall client is enabled : FTP works from internet explorer When firewall client is disabled : FTP does not work from internet explorer Help ! :-) ________________________________ Van: Dijk, Sebastian van Verzonden: maandag 27 december 2004 10:30 Aan: [ISAserver.org Discussion List] Onderwerp: [isalist] outgoing client ftp problem through isa 2000 http://www.ISAserver.org Server : 2003, ISA 2000 including all service packs Clients : Windows XP, no firewall enabled. I am trying but failing in giving users rights for the FTP Protocol, to access FTP Servers. What is the situation : Client Machines with internet explorer proxy settings enabled, all at port 8080. Clients have a default gateway pointing to the ISA server (ISA 2000) On the ISA server, i made a new protocol definition : "ftp outbound" port 21, outbound. No secondary connections. A new protocol rule is made, groups are allowed to used this FTP OUTBOUND protocol definition. Outgoing web requests : "Same listener for all internal IP Addresses", tcp port 8080 and integrated authentication is used. "Ask unauthenticated users for authentication" is turned off, this is because we have a small application running that can't be used with the firewall client, so it needs just a securenat configuration. The FTP Access filter is enabled. The problem : 1. User's can not access ftp sites, i've set the "passive ftp" option in Internet Explorer but it just won't work. I tried to set the proxy port in Internet Explorer to 21 in stead of 8080. No result. 2. Then i tried to install the firewall client, now client CAN use FTP connections. But i want only the Internet Explorer proxy settings to be used. Has anyone a clue why my FTP setup won't work without firewall client enabled ?? Thanks in advance, Sebastian van Dijk ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: sebastian.van.dijk@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.