Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

FTP Outside Access Issues

I have my FTP server set up and ready to rock. I have an ASA 5510 which I believe is the culprit to my Outside Access In issues.

I can connect to the FTP server using command line no problem..I can log in and get files (all tested from my home over public internet). I cannot connect via FTP Client (Filezilla, IPSwitch), Internet Explorer, Firefox, Windows Explorer, etc... I get the Login Prompt but does not throw me in my home directory. I believe the message from the web browser said something like: server has been reset...?

Maybe an ACL issue - not really sure. I have one ACL entry: access-list outside_acccess_in extended permit tcp any host "ftpserver".

Any suggestions welcome - and let me know if you need any other info. Thanks.

PS: I can access the FTP server with any of the above methods LAN-side. Only using command line ftp can I access it from public.
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.2(1)
Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: FTP Outside Access Issues

Can you check if you have ftp inspection under the default policy-map?

If not please enable it and test again.

If yes, then reproduce the failure and enable "debug ftp" to see what the debugs have to say. Also check the logs to see if the ftp data channel is blocked.

I hope it helps.

PK

3 REPLIES
Cisco Employee

Re: FTP Outside Access Issues

Can you check if you have ftp inspection under the default policy-map?

If not please enable it and test again.

If yes, then reproduce the failure and enable "debug ftp" to see what the debugs have to say. Also check the logs to see if the ftp data channel is blocked.

I hope it helps.

PK

New Member

Re: FTP Outside Access Issues

Thanks PK! I enabled policy inspection for FTP which seems to have done the trick. I'm now able to hit the root of the FTP Server via Web Browser, Graphical FTP Client, etc. Thanks again - so much.

Cisco Employee

Re: FTP Outside Access Issues

I am glad it worked!

Take care,

PK

423
Views
0
Helpful
3
Replies
CreatePlease to create content