topic Re: Use Active FTP for signature updates in Network Security https://community.cisco.com/t5/network-security/use-active-ftp-for-signature-updates/m-p/377880#M96919 <HTML><HEAD></HEAD><BODY><P>As far as I know, you can only use the passive ftp for the sig updates.</P></BODY></HTML> Thu, 10 Mar 2005 20:11:08 GMT umedryk 2005-03-10T20:11:08Z Use Active FTP for signature updates https://community.cisco.com/t5/network-security/use-active-ftp-for-signature-updates/m-p/377879#M96918 <P>Is it possible to use active ftp opposed to passive when upgrading IDS signatures? I am running 4210s with v.4.1. During signature updates for some reason the FTP connection uses a random ephemeral port instead of port 21. When I ftp manaually from the service account with the PASS command to turn off passive ftp, the file transfers fine. ACLs are blocking the connection because the port always changes and I don't want to open up the ephemeral port range. </P><P></P><P>Thanks,</P><P>Joel</P> Sun, 10 Mar 2019 09:18:39 GMT https://community.cisco.com/t5/network-security/use-active-ftp-for-signature-updates/m-p/377879#M96918 jtyson 2019-03-10T09:18:39Z Re: Use Active FTP for signature updates https://community.cisco.com/t5/network-security/use-active-ftp-for-signature-updates/m-p/377880#M96919 <HTML><HEAD></HEAD><BODY><P>As far as I know, you can only use the passive ftp for the sig updates.</P></BODY></HTML> Thu, 10 Mar 2005 20:11:08 GMT https://community.cisco.com/t5/network-security/use-active-ftp-for-signature-updates/m-p/377880#M96919 umedryk 2005-03-10T20:11:08Z