topic Re: FTP and sqlnet issue after migrating to FTD 4100 in Network Security

FTP and sqlnet issue after migrating to FTD 4100

pushpak.lele — Fri, 21 Feb 2020 16:17:34 GMT

Hi,

Recently we have migrated from ASA 5585 to FTD 4110 . After migration we are facing problem with FTP and sqlnet traffic. Earlier it used to work properly but after migration some times its working and some times connection time out.

We used the packet capture and packet tracer to analyze the issue but it shows that the server is initiating the reset flag,

Fast path seems to be working for the traffic . Using fast path we are bypassing the snort check . But even without the fast path in the packet tracer we can see that the snort verdict is showing as pass.

Hence we need to understand what exactly is happening with the traffic if the fast path is not enabled.

Thanks and regards

Pushpak

Re: FTP and sqlnet issue after migrating to FTD 4100

Marius Gunnerud — Fri, 28 Sep 2018 20:51:15 GMT

I don't know about SQL, but we had and still have issues with FTP. Are you using active or passive FTP. There seems to be a bug that prevents active FTP from working correctly when being sent through snort. This is even the case when we have inspect FTP configured in the policy map using flexconfig. Passive FTP works fine though. So we used this as a workaround, using passive FTP instead of active FTP.

Re: FTP and sqlnet issue after migrating to FTD 4100

pushpak.lele — Sat, 29 Sep 2018 00:41:34 GMT

Hi,

Thanks, i will try with the passive FTP and let you know.

Thanks and regards

Pushpak