NAT IP Address into Payload (PIX 525)

[steve pearson]

Hi

Recently a third party has begun to have problems with FTP and has informed me the NAT'd IP address is not being encapsulated into the Payload of each packet.  I'm not entirely sure on how this could be configured on the PIX firewall?

Scenario:

PCs on the LAN connect to FTP server outside (Active FTP).  Apparently the NAT'd address is only appearing in each packet header and not the Payload.

Details of firewall:

Cisco PIX Security Appliance Software Version 8.0(4)
Device Manager Version 6.1(3)
System image file is "flash:/PIX804.BIN"
Hardware:   PIX-525

If anyone is able to advise how to change this on ASDM that would be great!

Many thanks.

[Nagaraja Thanthry]

Hello,

Do you have "inspect ftp" enabled? If not, please try the following:

https://www.cisco.com/en/US/docs/security/asdm/6_1/user/guide/svcrules.html#

wp1165659

Hope this helps.

Regards,

NT