topic asa ftp uploadproblem in Network Security

asa ftp uploadproblem

diptanshusingh — Fri, 21 Feb 2020 09:11:52 GMT

I have a problemm i have a asa 5510 box running 7.2 ios. now asa has inspect configured for FTP on 21. Now the problem is that whether in active mode or pasv mode everything wrks fine like i can dwnload and brws the directory. now when i try to upload any file it starts and after transfering some bytes it stops n times out after some time.i tried many diff ftp servers and applying acl for matching ftp traffic and everything wrks fine (acl matches ftp traffic) problem persists only for ftp uploads (both activ n pasv)..

Re: asa ftp uploadproblem

a-vazquez — Tue, 03 Oct 2006 22:36:54 GMT

Try this, apply no fixup protocol in the box.

try this link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml

Re: asa ftp uploadproblem

jwalker — Wed, 04 Oct 2006 00:07:33 GMT

Not sure if this is the issue but you might do a sho asp drop and check to see if the out-of-order packet buffer count is increasing (need to do the sho asp drop several times). If it is increasing, you can increase the number of buffers on your ASA by increasing the queue-limit. Here is an example..

hostname(config)# tcp-map tmap

hostname(config-tcp-map)# queue-limit 60

hostname(config)# class-map cmap

hostname(config-cmap)# match port tcp eq telnet

hostname(config)# policy-map pmap

hostname(config-pmap)# class cmap

hostname(config-pmap)# set connection advanced-options tmap

hostname(config)# service-policy pmap global

hostname(config)#

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a008063f0fa.html#wp1644016

This may or may not be your problem, but it is worth a shot.

*** Please rate if this helps.*****

thanks.

Jay

Re: asa ftp uploadproblem

sticano — Mon, 05 Feb 2007 15:23:20 GMT

I am having this exact issue. Can you please tell me if you got it resolved, and what was the fix? Thanks.