FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

zhangjianping · ‎04-06-2009

I have 2 c6509 with one FWSM (3.2) in transparent mode on each chassis.Context1 for server1, and context2 for server 2 . A client in outside try to use proxy ftp, once issue 'proxy get texst.txt', the connection closed. Pls help

client> ftp

ftp> open server1

proxy open server2

proxy dir

proxy get test.txt

This scenario is ok when i tested withoug FWSM, or these two servers worked in one context

gfullage · ‎04-07-2009

The FWSM (or the PIX/ASA) does NOT allow FTP proxy connections. These are seen as a security risk and therefore denied. If you look at the syslog messages, you'll see a message similar to:

*****%FWSM-4-406002: FTP port command different address: 1.1.1.1(172.25.8.81) to 172.30.201.24 on interface inside******

zhangjianping · ‎04-08-2009

Thanks Sir.

Pls inform me how to resolve this issue.

The customer donot want to change the network structure, so is there any Command or ACL or other way to allow this application on FWSM?

You suggestion will be appreciated. thanks