topic Re: native ftp using WSA 6.0 in Web Security

native ftp using WSA 6.0

mac123_ironport — Wed, 16 Sep 2009 21:28:36 GMT

Hi

Has anybody got native ftp working using WSA 6.0.0 ? Does anybody out there know if the default configuration needs changing ?

Any advice would be much appreciated

Thanks and Regards

Mac

Re: native ftp using WSA 6.0

khoanguy — Sat, 19 Sep 2009 01:52:23 GMT

No changes in default configuration needed.

Just make sure your ftp client like Filezilla is using port 8021 to the proxy with "USER@HOST" as type of proxy.

Re: native ftp using WSA 6.0

gabedellaquila — Tue, 06 Oct 2009 22:40:45 GMT

i still can't make it work.... when i try to connect thru explorer i receive the message: "The folder 'ftp://ftp.site.name/' is read-only because the proxy server is not set up to allow full access."
if i set the browser to use the port 8021 for ftp connection, it goes in timeout
and thru filezilla i can only make it work using generic proxy HTTP/1.1 and not using native proxy.

Can anyone help me and tell me if i have to create new identities or new policies and how to configure my clients

native ftp

mac123_ironport — Tue, 06 Oct 2009 22:48:21 GMT

Hi

It now works for me using the default native ftp configuration. I have only tried using the reflection X ftp client and this works fine. I added an identity to the ironport configuration to ensure the proxy server did not authenticate native ftp traffic.

If the ftp client does not support checkpoint or raptor authentication then add the identity and all should work sweet

Good luck

mac

Re: native ftp using WSA 6.0

gabedellaquila — Tue, 06 Oct 2009 23:28:49 GMT

i tried.. but no luck 😞

Re: native ftp using WSA 6.0

khoanguy — Wed, 07 Oct 2009 05:14:35 GMT

See if this helps:

Configuring proxy on internet explorer (IE) allows IE to use FTP over HTTP (when folder view is disabled).
It does not use native FTP, hence you can't use the proxy settings.
But we can use windows explorer to do native ftp proxying
Please open up windows explorer (not internet explorer, ex: double click on "My Computer")
and use the following URL in the address bar

# example when authentication is disabled on WSA
ftp://USERNAME_FTP%40FTP_SERVER:PASSWORD_FTP@PROXY:PORT

# example when authentication is enabled on WSA
ftp://USERNAME_FTP%40USERNAME_WSA%40FTP_SERVER:PASSWORD_FTP%40PASSWORD_WSA@PROXY:PORT

Please keep in mind that this is just a workaround.
It does not promise it would work in all cases.

This is under the assumption that you are using "Checkpoint" for "Authentication Format"

PS: Folder view is not part of IE, it's part of windows explorer, which runs out side of IE

PS2: same technique can be used to curl native ftp traffic through a proxy

Microsoft KB on how to enable Folder View: http://support.microsoft.com/kb/217888

Re: native ftp using WSA 6.0

gabedellaquila — Fri, 09 Oct 2009 01:47:44 GMT

thanks khoa, it works 😄