topic Re: WinSCP throught pix fiewall in Network Security

WinSCP throught pix fiewall

stafford.slater — Fri, 21 Feb 2020 07:49:15 GMT

I am trying to use a program WinSCP throught a pix 515. The application uses port 22 which is SSH so is kind of FTP over SSH.

The problem I have is how do I enable this, do I uses fixup ftp on port 22? will the firewall see ftp traffic or SSH encrypted traffic. How do I deal with the return traffic as it's on a different port.

Any help would be appreciated

Thanks,

Stafford

Re: WinSCP throught pix fiewall

paddyxdoyle — Tue, 21 Dec 2004 15:03:01 GMT

I'm pretty sure SSH works differently to FTP so you don't need to worry about fixups. Although SSH comes with SCP and SFTP, i believe SFTP is just an interface to make SCP look like tradional FTP and nothing else.

So if you need to allow SSH inbound then just open up your outside access-list for tcp 22 to your destination hosts.

HTH

Re: WinSCP throught pix fiewall

mostiguy — Tue, 21 Dec 2004 18:51:43 GMT

It should just work, no fixups necessary. If you want to enable scp for access from the outside, then you would need to open tcp port 22, just like any other port. The PIX, while supporting ssh for management, is scp/ssh/sftp unaware for fixups - not that it has any real need to be, as those should not need more than one port (with the exception of sftp, because a lot of people call things sftp and there is no real standard)