Yous have to open a packet filter for any services or apps on the ISA iteslf, except for those that are web-proxy-aware. Be aware that if this app is trying to use PASV FTP, it'll fail anyway. Jim Harrison MCP(NT4, 2K), A+, Network+, PCG ----- Original Message ----- From: "Goldman, Jason" <jgoldman@xxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Tuesday, October 23, 2001 13:57 Subject: [isalist] FTP problem http://www.ISAserver.org I have a brand new ISA server installed behind my heavyweight firewall. I also have some web filtering software installed on this ISA server. This software needs to ftp to the vendor regularly to update its control files. What is happening is that the ftp (even from a command line) returns a "host not reachable". I have added a persistent route on the ISA server of the firewall NIC facing the ISA server. I did a capture on the interface facing the firewall and when I try to ftp out, I see the DNS query go out and come back from the firewall but I never see an attempt to ftp out. This same setup works fine on my NT 4.0 Proxy 2.0 server. Any ideas? Jason Goldman Network Administrator Fuji Photo Film, Inc. PO Box 1306 Greenwood, SC 29648-1306 ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')