cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
563
Views
0
Helpful
1
Replies

firewall block ftp

yayasolenet
Level 1
Level 1

Hi Can anybody have a look for why the firewall is not working?

How to inspect ftp for incoming traffic?

1 Reply 1

shzaman
Level 1
Level 1

Hello,

In the attached configuration I can see following

class-map global-class

match default-inspection-traffic

!

!

policy-map global-policy

class global-class

  inspect ftp

But I am not seeing 'service-policy' command so without that policy is not going to be applied and inspection will not run. So use following command in global configuration mode

#service-policy global-policy global

And then check 'show service-policy' command output to see if inspection is in place and is there any packet hitting inspection (after attempting FTP transfer/connection).

Note: Inspection will do its job if FTP communication is not encrypted.

Here is one link for information about FTP/TFTP (configuration on ASA)

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807ee585.shtml

I hope this will help.

-Shahid

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: