topic I've created an ACL & allowed in Network Security

How to configure FTP using the ASDM

mkazam001 — Tue, 12 Mar 2019 07:59:48 GMT

Can anyone please advise how to configure FTP in both active & passive modes using the ASDM for the ASA.

There seems to be more to it than simply allowing access to ports 20 & 21.

Kind regards, K Azam

Hi,

johnd2310 — Wed, 06 Jul 2016 23:17:29 GMT

Hi,

Have a look at the following docs:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113110-asa-enable-ftp-00.html

http://www.cisco.com/c/en/us/support/docs/content-networking/file-transfer-protocol-ftp/200194-ASA-9-x-Configure-FTP-TFTP-Services.html

Thanks

John

Thank you John but I was

mkazam001 — Thu, 07 Jul 2016 11:11:16 GMT

Thank you John but I was after the method using the ASDM.

Regards

I've created an ACL & allowed

mkazam001 — Fri, 08 Jul 2016 11:38:21 GMT

I've created an ACL & allowed FTP from the source (remote client) to the destination (FTP server located behind the ASA) - this has been applied inbound on the outside interface.

This is supposed to work over a VPN connection but I get the attached error message when I run packet tracer.

Any ideas??...anyone?

Is the VPN tunnel up you

Marcel Maeder — Fri, 08 Jul 2016 12:15:59 GMT

Is the VPN tunnel you tested up? Do you have ftp inspections enabled at the service policy?

Yes, used the sh crypto ipsec

mkazam001 — Fri, 08 Jul 2016 13:31:20 GMT

Yes, used the sh crypto ipsec sa cmd to verify vpn tunnel is up and

ftp inspection is enabled in service policy rules

Is it a site to site vpn?

Marcel Maeder — Sat, 09 Jul 2016 05:34:08 GMT

Is it a site to site vpn? Does other allowed traffic work? Do you use vpn filters?

Could you send us the relevant config (service policies, interface acl, vpn-filter)

Sorry I've not responded,

mkazam001 — Tue, 26 Jul 2016 15:06:12 GMT

Sorry I've not responded, been so busy with the a separate vpn issue but I will be working on this soon. Thanks for your help thus far.