i have firewall ASA 8.0(4). My FTP server is located in DMZ side and one FTP server is located on inside network.
From DMZ I can do the FTP and everything but from inside I am not able to do the FTP to DMZ server. Though Ping and remote
desktop i can do.
Below is the configuration of my firewall.
mac-address 000c.f542.4abc standby 020c.f542.4abc
ip address 192.168.0.1 255.255.255.224 standby 192.168.0.2
no ip address
mac-address 000c.f342.4abc standby 020c.f342.4abc
ip address 172.16.11.1 255.255.255.0 standby 172.16.11.5
access-list acl-in extended permit ip host 192.168.80.89 any
static (inside,serverdmz) 192.168.80.89 192.168.80.89 netmask 255.255.255.255
access-list acl-serverdmz extended permit ip host 172.16.11.108 any
access-list aclnat_serverdmz extended permit ip any 172.16.11.0 255.255.255.0
nat (inside) 2 access-list aclnat_cards
nat (inside) 3 access-list aclnat_serverdmz
nat (inside) 1 0.0.0.0 0.0.0.0
nat (serverdmz) 1 172.16.11.0 255.255.255.0
global (partners) 1 172.16.15.253 netmask 255.255.255.255
global (serverdmz) 1 172.16.11.254
global (serverdmz) 3 interface
global (cardsdmz) 2 interface
ENOCDC-FW01/Rack1# show conn address 172.16.11.108
1933 in use, 15723 most used
TCP serverdmz 172.16.11.108:3389 inside 192.168.80.89:2367, idle 0:00:31, bytes 1798427, flags UIO
from dmz to inside everything is working fine but from inside I am not able to do the FTP on DMZ server. though the FTP server is working fine locally.
Please help me out how to find a solution for this.