RE: FTP over VPN

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 27 Feb 2006 11:58:56 -0800

If that's the case, you should use an application more like the one that will 
be making the calls.
If it's not browser-based, ditch the IE testing and use the cmd-line FTP client.
Also, testing from the ISA is *not* validating the traffic from an internal 
host. 


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Monday, February 27, 2006 11:23
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FTP over VPN

http://www.ISAserver.org

Folder view is selected. I'm only making sure I can establish a connection. 
After that it's up to the software LOB guy to use. EDI transmissions will be 
coming through this tunnel. 

So now I have an error code 0x80072751

Amy
 
Harbor Computer Services
Small Business Computer Specialists
 
Office (248) 546-6056
Mobile (248) 890-1794
 
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

 

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Monday, February 27, 2006 1:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FTP over VPN

http://www.ISAserver.org

Don't use web-proxy-based FTP. 
You can configure the browser for "folder view" or you can use a non-browser 
FTP client.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Monday, February 27, 2006 10:31
To: [ISAserver.org Discussion List]
Subject: [isalist] FTP over VPN

http://www.ISAserver.org

I'm setting my first VPN gateway. The client needs to send FTP over the Gateway 
to another company. I'm getting an error message that the proxy is set for 
read-only. I've unchecked the read only box on the VPN rule.
I'm still getting this message. Here's what the log says.

Original Client IP      Client Agent    Authenticated Client    Service
Server Name     Referring Server        Destination Host Name
Transport       MIME Type       Object Source   Source Proxy
Destination Proxy       Bidirectional   Client Host Name        Filter
Information     Network Interface       Raw IP Header   Raw Payload
Source Port     Processing Time Bytes Sent      Bytes Received  HTTP
Status Code     Cache Information       Error Information       Log
Record Type     Destination IP  Action  Rule    Client IP       Client
Username        URL     Source Network  Protocol        Destination Port
Destination Network     HTTP Method     Log Time        Result Code

0.0.0.0                         SBS2003 -               TCP     -
No              -                               33544   20922   0
0               0x0     0x0     Firewall        198.133.250.19  Failed
Connection Attempt      GXS FTP out Rule        10.1.10.40
-       Local Host      FTP     21      GXS VPN -       2/27/2006
1:34:45 PM      0x8007274c 

0.0.0.0 Microsoft(r) Windows(tm) FTP Folder     No      Proxy   SBS2003
198.133.250.19  TCP             Internet        -       -
-               -       -       -       0       21000   4496    112
10060   0x0     0x40    Web Proxy Filter        198.133.250.19  Failed
Connection Attempt      GXS FTP out Rule        192.168.16.2
anonymous       ftp://198.133.250.19/   Local Host      ftp     21
GXS VPN GET     2/27/2006 1:35:06 PM    

What am I missing? 

Thanks,

Amy
 
Harbor Computer Services
Small Business Computer Specialists

Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: