PIX to ASA migration produces problems with FTP

jimb · ‎07-16-2007

Since migrating to the ASA we are seeing intermitant problems with FTP connections from the outside network that we did not have with the PIX? We are using software ver:7.2(1) on the ASA.

Anybody got any ideas?

JORGE RODRIGUEZ · ‎07-16-2007

what sort of problems are you experiencing ,

can you be more specific?

I will see if there is any reports on ftp issues and this version code but in the mean time please take a look at this link and configure FTP inspection and see if that resolves the issue.

http://www.ciscotaccc.com/kaidara-advisor/security/showcase?case=K35419735

HTH

Jorge

Jorge Rodriguez

jimb · ‎07-16-2007

Hi Jorge,

We only have trouble from our outside interface to ftp servers on our dmz. I have narrowed it down to pasv mode FTP. I opened ports and mapped them on the FTP server to fix it. What is odd is that with the same configuration on the PIX, we did not have to specify pasv ports for FTP traffic connecting on port 21. Is there a global setting on the ASA regarding pasv FTP through the ASA that did not apply to the PIX?

JORGE RODRIGUEZ · ‎07-16-2007

Interesting, I have not yet worked with the ASA but rather PIXs, but I do read on ASAs.

It seems ASA treats FTP services differently .perhaps someone can share more insight on this differences.

Check this link

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807ee585.shtml

Jorge Rodriguez