https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050660#M135809 <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">Hello,</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">I have issue accessing FTP links through my Cisco Firepower ASA 5545.&nbsp;&nbsp;&nbsp; Although FTP inspection is enabled on my Firewall, but still I can not access any public ftp links.</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">Bellow error I get on my ASA logs:</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">4|May 08 2017|11:12:32|507003|192.168.2.6|52771|203.215.171.18|21|tcp flow from inside:192.168.2.6/52771 to outside:203.215.171.18/21 terminated by inspection engine, reason - disconnected, dropped packet.</SPAN></P> Tue, 12 Mar 2019 09:19:49 GMT Imran Ahmad 2019-03-12T09:19:49Z https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050660#M135809 <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">Hello,</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">I have issue accessing FTP links through my Cisco Firepower ASA 5545.&nbsp;&nbsp;&nbsp; Although FTP inspection is enabled on my Firewall, but still I can not access any public ftp links.</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">Bellow error I get on my ASA logs:</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">&nbsp;</SPAN></P> <P style="margin: 0in 0in 0pt;"><SPAN style="font-family: &quot;Courier New&quot;;">4|May 08 2017|11:12:32|507003|192.168.2.6|52771|203.215.171.18|21|tcp flow from inside:192.168.2.6/52771 to outside:203.215.171.18/21 terminated by inspection engine, reason - disconnected, dropped packet.</SPAN></P> Tue, 12 Mar 2019 09:19:49 GMT https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050660#M135809 Imran Ahmad 2019-03-12T09:19:49Z https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050661#M135810 <P>Is it enabled on the global policy or interface policy. If interface one, make sure that your service policy is assign to the right interface</P> Mon, 08 May 2017 08:03:26 GMT https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050661#M135810 Mohammed al Baqari 2017-05-08T08:03:26Z https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050662#M135811 <P>Hi Mohahmmed,&nbsp;&nbsp; it is enabled on Global-Policy .&nbsp;&nbsp;&nbsp;</P> Mon, 08 May 2017 10:18:24 GMT https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050662#M135811 Imran Ahmad 2017-05-08T10:18:24Z https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050663#M135812 <P>Can you share your ACL and Policy configs. Also, please run a packet trace and share the result</P> Mon, 08 May 2017 11:05:46 GMT https://community.cisco.com/t5/network-security/ftp-access-issue/m-p/3050663#M135812 Mohammed al Baqari 2017-05-08T11:05:46Z