ASA5505 - Active FTP will not pass through

[Kenzie6964]

Hi,

Please be gentle with me as I'm still learning Cisco

I'm trying to configure our Cisco ASA 5505 to allow Active mode FTP connections through. We have a user that uses some bespoke software that connects to a client via FTP in active mode.

When using the packet tracer. The packets fail by the DENY implicit incoming Rule (please see below). This rule looks as though it cannot be editted although as seen in my screen shot there are 2 rules very similiar?

inspect FTP is enabled and always has been enabled.

[johnlloyd_13]

Yeah saw that one earlier and I understand what you mean. Look at me still checking CSC on my iphone :)

It would be cool though if you can create one coz your line of thought is much better.


Sent from Cisco Technical Support iPhone App

[Kenzie6964]

Hello,

it seems that there was a connection issue between our client and the Remote FTP server. This has been resolved now however active mode still will not connect through.

If I was to strip out some logs and PM to you would you be able to cast your eye over them? I'm not entirely sure what I am looking for? I'm still convinced that there is a issue at the remote server side; however I need to be 100% sure before i can hand it back to them

Thanks for your help with this.

[Jouni Forss]

Hi,

Sure, you can send the logs. Though generally I troubleshoot FTP related issues with traffic captures. And even in those situations there is usually different people that work with the actual clients and servers when I provide the information on what I see in the logs and captures

- Jouni

[Kenzie6964]

Hi,

I've just found a configuration fault within the software being used. I'm just waiting on someone to test the changes I have made. Should hopefully the resolve the issue.
I will keep you updated. I'll be furious if this resolves things after everything we've gone through!

[Jouni Forss]

Ok,

Hopefully it corrects the problem

- Jouni