Internet Explorer and FTP

[mulrich]

I have FTP opened up for a server in my DMZ. Windows command prompt ftp works fine, but Internet Exporer always fails. Packet captures shows that when the server enters passive mode, that message (server to client) "227 Entering passive mode" is blocked by the ASA. Both the ASA and IE are set to passive mode FTP.

[globalnettech]

Hello,

passive mode FTP uses a random TCP port between 1024 and 5000, make sure these are not blocked by your ASA. Or, as an alternative, use active mode FTP (disable the respective check box in the advanced tab of your Internet Explorer, and configure your ASA for active mode).

HTH,

GNT