topic Re: PIX to ASA migration produces problems with FTP in Network Security

PIX to ASA migration produces problems with FTP

jimb — Mon, 11 Mar 2019 10:45:17 GMT

Since migrating to the ASA we are seeing intermitant problems with FTP connections from the outside network that we did not have with the PIX? We are using software ver:7.2(1) on the ASA.

Anybody got any ideas?

Re: PIX to ASA migration produces problems with FTP

JORGE RODRIGUEZ — Mon, 16 Jul 2007 16:27:31 GMT

what sort of problems are you experiencing ,

can you be more specific?

I will see if there is any reports on ftp issues and this version code but in the mean time please take a look at this link and configure FTP inspection and see if that resolves the issue.

http://www.ciscotaccc.com/kaidara-advisor/security/showcase?case=K35419735

HTH

Jorge

Re: PIX to ASA migration produces problems with FTP

jimb — Mon, 16 Jul 2007 17:04:18 GMT

Hi Jorge,

We only have trouble from our outside interface to ftp servers on our dmz. I have narrowed it down to pasv mode FTP. I opened ports and mapped them on the FTP server to fix it. What is odd is that with the same configuration on the PIX, we did not have to specify pasv ports for FTP traffic connecting on port 21. Is there a global setting on the ASA regarding pasv FTP through the ASA that did not apply to the PIX?

Re: PIX to ASA migration produces problems with FTP

JORGE RODRIGUEZ — Mon, 16 Jul 2007 17:38:58 GMT

Interesting, I have not yet worked with the ASA but rather PIXs, but I do read on ASAs.

It seems ASA treats FTP services differently .perhaps someone can share more insight on this differences.

Check this link

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807ee585.shtml