topic Re: FTP on Non Standard Port - PIX 7 or higher in Network Security

FTP on Non Standard Port - PIX 7 or higher

edw — Tue, 26 Mar 2019 00:38:54 GMT

Hi,

I'm having problems trying to get FTP working on sites with ports not 21 ? I have 2 FTP sites on my DMZ - FTP 21 works fine but FTP to say 1400 seems to fail IE doesn't get there.... logs show connectiong through PIX not being denied but then says TCP FIN entry ??

Any ideas?

I have tried removeing the inspection engine ?

Thanks

Re: FTP on Non Standard Port - PIX 7 or higher

kagodfrey — Wed, 21 Nov 2007 14:43:41 GMT

Hi Ed

You need the inspection engine, and you will also need to create a new class map for it. Take a look at:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/inspect.html#wp1383679

...which goes into some detail on allowing ftp on port 1056.

HTH

Regards

Kev

Re: FTP on Non Standard Port - PIX 7 or higher

edw — Wed, 21 Nov 2007 16:19:20 GMT

Hi,

Thanks for point in the right direction.

Re: FTP on Non Standard Port - PIX 7 or higher

edw — Thu, 13 Dec 2007 17:15:55 GMT

Hi,

Unfortantly I'm having problems. I understand the consept however when I try to put it into practise it fails.

So I have specified the access-list for it and assigned it to the new class. I have added this class to the policy global_default

Nothing has changed thou ???

Does anyone have example config with this theory in ?

Thanks