topic Re: Outbound client ftp connections not working. in Network Security https://community.cisco.com/t5/network-security/outbound-client-ftp-connections-not-working/m-p/2322359#M311608 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>If your users interface on the ASA is <STRONG>"inside"</STRONG> then first try <STRONG>"packet-tracer"</STRONG> to determine what configurations would apply for this connection</P><P></P><P><STRONG>packet-tracer input inside tcp <HOST ip=""> 12345 <TARGET ip=""> 21</TARGET></HOST></STRONG></P><P></P><P>Also check that you have FTP Inspection enabled in your Policy Map</P><P></P><P>Use the command</P><P></P><P><STRONG>show run policy-map</STRONG></P><P></P><P>- Jouni</P></BODY></HTML> Thu, 03 Oct 2013 14:42:08 GMT Jouni Forss 2013-10-03T14:42:08Z Outbound client ftp connections not working. https://community.cisco.com/t5/network-security/outbound-client-ftp-connections-not-working/m-p/2322358#M311606 <P>Having trouble figuring this out.&nbsp; Probably missing something simple.</P><P>I have some users that are trying to initiate a passive ftp connection to a server on the web.</P><P>I’ve setup an object group for general web traffic outbound sourced from inside.&nbsp; Here’s a snippet. </P><P><SPAN style="font-size: 10pt; color: #0000ff;"> object-group service web_general tcp-udp</SPAN></P><P><SPAN style="font-size: 10pt; color: #0000ff;"> port-object eq 21</SPAN></P><P><SPAN style="font-size: 10pt; color: #0000ff;"> port-object eq www</SPAN></P><P><SPAN style="font-size: 10pt; color: #0000ff;"> port-object eq 443</SPAN></P><P></P><P>and ACL.</P><P><SPAN style="font-size: 10pt; color: #0000ff;">access-list inside extended permit object-group tcp-udp object-group myUsers any object-group web_general</SPAN></P><P></P><P><SPAN style="font-size: 10pt;">the user tries to open a connection and nothing..</SPAN></P><P><SPAN style="font-size: 10pt;">any ideas on troubleshooting?</SPAN></P> Tue, 12 Mar 2019 02:46:48 GMT https://community.cisco.com/t5/network-security/outbound-client-ftp-connections-not-working/m-p/2322358#M311606 kscottwoody 2019-03-12T02:46:48Z Re: Outbound client ftp connections not working. https://community.cisco.com/t5/network-security/outbound-client-ftp-connections-not-working/m-p/2322359#M311608 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>If your users interface on the ASA is <STRONG>"inside"</STRONG> then first try <STRONG>"packet-tracer"</STRONG> to determine what configurations would apply for this connection</P><P></P><P><STRONG>packet-tracer input inside tcp <HOST ip=""> 12345 <TARGET ip=""> 21</TARGET></HOST></STRONG></P><P></P><P>Also check that you have FTP Inspection enabled in your Policy Map</P><P></P><P>Use the command</P><P></P><P><STRONG>show run policy-map</STRONG></P><P></P><P>- Jouni</P></BODY></HTML> Thu, 03 Oct 2013 14:42:08 GMT https://community.cisco.com/t5/network-security/outbound-client-ftp-connections-not-working/m-p/2322359#M311608 Jouni Forss 2013-10-03T14:42:08Z