If that's the case, you should use an application more like the one that will be making the calls. If it's not browser-based, ditch the IE testing and use the cmd-line FTP client. Also, testing from the ISA is *not* validating the traffic from an internal host. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Monday, February 27, 2006 11:23 To: [ISAserver.org Discussion List] Subject: [isalist] RE: FTP over VPN http://www.ISAserver.org Folder view is selected. I'm only making sure I can establish a connection. After that it's up to the software LOB guy to use. EDI transmissions will be coming through this tunnel. So now I have an error code 0x80072751 Amy Harbor Computer Services Small Business Computer Specialists Office (248) 546-6056 Mobile (248) 890-1794 Client Blog: http://smalltechnotes.blogspot.com/ Tech Blog: http://isainsbs.blogspot.com/ Website: http://www.harborcomputerservices.net/ -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Monday, February 27, 2006 1:49 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FTP over VPN http://www.ISAserver.org Don't use web-proxy-based FTP. You can configure the browser for "folder view" or you can use a non-browser FTP client. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Monday, February 27, 2006 10:31 To: [ISAserver.org Discussion List] Subject: [isalist] FTP over VPN http://www.ISAserver.org I'm setting my first VPN gateway. The client needs to send FTP over the Gateway to another company. I'm getting an error message that the proxy is set for read-only. I've unchecked the read only box on the VPN rule. I'm still getting this message. Here's what the log says. Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Source Port Processing Time Bytes Sent Bytes Received HTTP Status Code Cache Information Error Information Log Record Type Destination IP Action Rule Client IP Client Username URL Source Network Protocol Destination Port Destination Network HTTP Method Log Time Result Code 0.0.0.0 SBS2003 - TCP - No - 33544 20922 0 0 0x0 0x0 Firewall 198.133.250.19 Failed Connection Attempt GXS FTP out Rule 10.1.10.40 - Local Host FTP 21 GXS VPN - 2/27/2006 1:34:45 PM 0x8007274c 0.0.0.0 Microsoft(r) Windows(tm) FTP Folder No Proxy SBS2003 198.133.250.19 TCP Internet - - - - - - 0 21000 4496 112 10060 0x0 0x40 Web Proxy Filter 198.133.250.19 Failed Connection Attempt GXS FTP out Rule 192.168.16.2 anonymous ftp://198.133.250.19/ Local Host ftp 21 GXS VPN GET 2/27/2006 1:35:06 PM What am I missing? Thanks, Amy Harbor Computer Services Small Business Computer Specialists Client Blog: http://smalltechnotes.blogspot.com/ Tech Blog: http://isainsbs.blogspot.com/ Website: http://www.harborcomputerservices.net/ ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.