topic Re: FWSM Blocking FTP in Network Security https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243678#M840863 <HTML><HEAD></HEAD><BODY><P>Update: Received help from TAC and turns out to be an issue with 3.1(4) code. Upgraded to 4.0.4 code as TAC recommended which resolved the issue.</P><P></P><P>Rommel</P></BODY></HTML> Wed, 12 Aug 2009 16:38:00 GMT uchideshi 2009-08-12T16:38:00Z FWSM Blocking FTP https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243676#M840861 <P>I have a FWSM running 3.1.4 that has an outside and inside interface. There is a server 146.22.x.x on the outside that needs to ftp to 146.27.y.y The FW buffer log shows access-list outside is denying the traffic. I look at access-list outside and the very first line allows 146.22.x.x to 146.27.y.y I add an ACE on top to allow any tcp from 146.22.x.x to 146.27.y.y but still gets the denies in the log. I pipe the hex number on the deny info and it shows that the ACL denying the traffic is my explicit deny ip any any on line 91 of access-list outside. I am using the default class-map and policy-map. FTP is being inspected under the default map. Nat control is turned off on this FWSM. Any suggestions on how to troubleshoot this issue? Thanks</P><P></P><P>Rommel</P> Mon, 11 Mar 2019 15:35:17 GMT https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243676#M840861 uchideshi 2019-03-11T15:35:17Z Re: FWSM Blocking FTP https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243677#M840862 <HTML><HEAD></HEAD><BODY><P>Without seeing the logs, I can only hazard a guess.</P><P></P><P>What are the ports of the denied traffic? </P></BODY></HTML> Sun, 24 May 2009 23:38:47 GMT https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243677#M840862 mmacdonald70 2009-05-24T23:38:47Z Re: FWSM Blocking FTP https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243678#M840863 <HTML><HEAD></HEAD><BODY><P>Update: Received help from TAC and turns out to be an issue with 3.1(4) code. Upgraded to 4.0.4 code as TAC recommended which resolved the issue.</P><P></P><P>Rommel</P></BODY></HTML> Wed, 12 Aug 2009 16:38:00 GMT https://community.cisco.com/t5/network-security/fwsm-blocking-ftp/m-p/1243678#M840863 uchideshi 2009-08-12T16:38:00Z