I'm setting up a new ACL on our PIX firewall (running version 7.x) to block FTP. Someone asked if I could enable FTP downloading for some machines but prevent from uploading. Is that possible? What would the ACL look like?
The difference between FTP upload and download is the difference between the commands put and get. I do not believe that there is any access list command that lets you differentiate the FTP command being used.
Check out the 7.0 configuration guide under "Applying Application Layer Protocol Inspection" and then "Managing FTP Inspection". There may be some content there that could help.
Tariq
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
