topic FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!! in Network Security

FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

zhangjianping — Mon, 11 Mar 2019 15:15:36 GMT

I have 2 c6509 with one FWSM (3.2) in transparent mode on each chassis.Context1 for server1, and context2 for server 2 . A client in outside try to use proxy ftp, once issue 'proxy get texst.txt', the connection closed. Pls help

client> ftp

ftp> open server1

proxy open server2

proxy dir

proxy get test.txt

This scenario is ok when i tested withoug FWSM, or these two servers worked in one context

Re: FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

gfullage — Wed, 08 Apr 2009 06:15:51 GMT

The FWSM (or the PIX/ASA) does NOT allow FTP proxy connections. These are seen as a security risk and therefore denied. If you look at the syslog messages, you'll see a message similar to:

*****%FWSM-4-406002: FTP port command different address: 1.1.1.1(172.25.8.81) to 172.30.201.24 on interface inside******

Re: FWSM with Proxy FTP error, help!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

zhangjianping — Wed, 08 Apr 2009 12:03:59 GMT

Thanks Sir.

Pls inform me how to resolve this issue.

The customer donot want to change the network structure, so is there any Command or ACL or other way to allow this application on FWSM?

You suggestion will be appreciated. thanks