topic Re: FTP Issue in Network Security https://community.cisco.com/t5/network-security/ftp-issue/m-p/1983593#M440790 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>the flags are not part of the problem here. RST ist the TCP-Reset, ECN ist Explicit Congestion Notification which ist used with QoS.</P><P></P><P>Very often FTP-Problems are caused by misconfigured FTP-Servers. That is often the case when the server-Admin is not aware of the firewall and configures the ftp-server-app with the public IP. I have seen that many times, especially with Cerberus-FTP-servers.</P><P></P><P></P><P>HTH, Karsten</P><P></P><P></P><P>Sent from Cisco Technical Support iPad App</P></BODY></HTML> Tue, 19 Jun 2012 00:14:21 GMT Karsten Iwen 2012-06-19T00:14:21Z FTP Issue https://community.cisco.com/t5/network-security/ftp-issue/m-p/1983592#M440789 <P>Hi </P><P></P><P>With the same FTP Client behind the firewall, we are trying to access 2 different FTP servers on Internet. The 1st FTP server is working without issue and able to transfer file.But for the 2nd FTP server we unable to transfer the file. </P><P></P><P>FTP inspection is enabled on the firewall. We are getting the attached error on the packet capture. </P><P></P><P>What is the flag [RST,ECN] meant.</P><P></P><P></P><P>Destination IP&nbsp;&nbsp; Source IP&nbsp; TCP 54 ftp&gt; 11092 [RST,ECN] Seq=2 Win=65026 Len=0</P><P>Source IP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Destination TCP 54 ftp&gt; 11100 [RST]&nbsp; Seq=99 Win=65026 Len=0</P><P></P><P></P><P>Regards</P><P>Alexander M</P> Mon, 11 Mar 2019 23:19:55 GMT https://community.cisco.com/t5/network-security/ftp-issue/m-p/1983592#M440789 Alexander Moorthy 2019-03-11T23:19:55Z Re: FTP Issue https://community.cisco.com/t5/network-security/ftp-issue/m-p/1983593#M440790 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>the flags are not part of the problem here. RST ist the TCP-Reset, ECN ist Explicit Congestion Notification which ist used with QoS.</P><P></P><P>Very often FTP-Problems are caused by misconfigured FTP-Servers. That is often the case when the server-Admin is not aware of the firewall and configures the ftp-server-app with the public IP. I have seen that many times, especially with Cerberus-FTP-servers.</P><P></P><P></P><P>HTH, Karsten</P><P></P><P></P><P>Sent from Cisco Technical Support iPad App</P></BODY></HTML> Tue, 19 Jun 2012 00:14:21 GMT https://community.cisco.com/t5/network-security/ftp-issue/m-p/1983593#M440790 Karsten Iwen 2012-06-19T00:14:21Z