RE: outgoing client ftp problem through isa 2000

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 22 Feb 2005 06:30:51 -0800

Hi Sebastian,

You've gone about this all wrong; you can't use a "custom" protocol
definition for FTP; one already exists and is part of the FTP
application filter.  Delete this custom rule and use the predefined FTP
protocol.

-----Original Message-----
From: Dijk, Sebastian van [mailto:sebastian.van.dijk@xxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 12:13 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: outgoing client ftp problem through isa 2000

http://www.ISAserver.org


Hey Guys, 

 

I am still having this weird problem :

 

When firewall client is enabled : FTP works from internet explorer

When firewall client is disabled : FTP does not work from internet
explorer

 

Help ! :-)

 

 

________________________________

Van: Dijk, Sebastian van 
Verzonden: maandag 27 december 2004 10:30
Aan: [ISAserver.org Discussion List]
Onderwerp: [isalist] outgoing client ftp problem through isa 2000

 

http://www.ISAserver.org

Server : 2003,  ISA 2000 including all service packs

Clients : Windows XP, no firewall enabled.

 

 

I am trying but failing in giving users rights for the FTP Protocol, to
access FTP Servers. 

 

What is the situation :

 

Client Machines with internet explorer proxy settings enabled, all at
port 8080.

Clients have a default gateway pointing to the ISA server (ISA 2000)

 

On the ISA server, i made a new protocol definition : "ftp outbound"
port 21, outbound. No secondary connections.

A new protocol rule is made, groups are allowed to used this FTP
OUTBOUND protocol definition.

 

Outgoing web requests : 

"Same listener for all internal IP Addresses", tcp port 8080 and
integrated authentication is used.

 

"Ask unauthenticated users for authentication" is turned off, this is
because we have a small application running that can't be used with the
firewall client, so it needs just a securenat configuration.

 

The FTP Access filter is enabled.

 

The problem : 

 

1. User's can not access ftp sites, i've set the "passive ftp" option in
Internet Explorer but it just won't work.

I tried to set the proxy port in Internet Explorer to 21 in stead of
8080. No result.

 

2. Then i tried to install the firewall client, now client CAN use FTP
connections.

But i want only the Internet Explorer proxy settings to be used.

 

Has anyone a clue why my FTP setup won't work without firewall client
enabled ??

 

 

Thanks in advance, 

 

Sebastian van Dijk

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
sebastian.van.dijk@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

All mail to and from this domain is GFI-scanned.



Other related posts: