topic Re: TFTP 'state' failing in Network Security

TFTP 'state' failing

neil_titchener — Mon, 11 Mar 2019 18:08:22 GMT

Hi all,

We are running a PIX 515e with Cisco PIX Security Appliance Software Version 8.0(4). When running TFTP session through the firewall the firewall doesn't recognise the return traffic as part of the TFTP connection. I understand how the TFTP protocol works so I don't need any info on that but has anyone else experienced this. Is there a particular setting that needs to be enabled or is there a work-around?

Cheers

Re: TFTP 'state' failing

Jennifer Halim — Wed, 07 Jul 2010 05:49:06 GMT

Yes, you can enable "inspect tftp" under your global_policy and that would allow the return tftp traffic.

Hope that helps.

Re: TFTP 'state' failing

neil_titchener — Thu, 08 Jul 2010 03:46:34 GMT

Thanks for the quick reply. Where would I find Global-policy in ASDM 6

.1? I've checked the Inspect Maps but there isn't one for tftp.

Cheers

Re: TFTP 'state' failing

Jennifer Halim — Thu, 08 Jul 2010 04:09:42 GMT

From ASDM:

Configuration --> Firewall --> Service Policy Rules --> highlight inspection_default --> click Edit --> Rule Actions tab --> scroll down and tick/enable TFTP

Hope that helps.