ASA 5505 FTP issues

[David Shearing]

Hi,

I was wondering if anyone could make sense of the attached screen shot of the real time log?

We have a music system which moves updated tracks and changes using FTP, but we have never been able to get them working over VPN using ASA firewalls.  Using a PIX 501s they work fine and i have just upgraded the ASA to 8.2(5) but it still have the problem.  Traffice seems to start and then get dropped leaving the files with a 0byte size, although aleast 1 small file is always sucsessful.

Any help would be appriciated

Thanks

David

[mirober2]

Hi David,

The logs show that a device on the inside of the network is sending a reset on the control channel (TCP/21). Because your ASA is configured for FTP inspection, it also closes the child (data) connections along with it.

I would suggest setting up packet captures to determine which device is actually sending the reset, and then find out why. Here is a guide that will help with ASA captures:

https://supportforums.cisco.com/docs/DOC-1222

-Mike