Outgoing SFTP (Auth SSL) on ASA5510
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2006 12:21 PM - edited 03-11-2019 02:00 AM
I am trying to configure an ASA5510 for outgoing secure ftp. When I try to make the connection using the ftp software (ws_ftp), the ws_ftp log says "ssl session not set for reuse" and then "ssl connect error 2". Any ideas would be greatly appreciated. Thanks.
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2006 04:21 PM
Hello,
SFTP isn't really supported:
Q. Is SFTP supported through the PIX?
A. No. In a typical FTP connection, either the client or the server must tell the other what port to use for data transfer. The PIX is able to inspect this conversation and open that port. However, with SFTP this conversation is encrypted and the PIX is unable to determine what ports to open and the SFTP connection ultimately fails.
One possible workaround in this situation is to use an SFTP client that supports the use of a "clear data channel." With this option enabled, the PIX should be able to determine what port needs to be opened.
--Jason
Please rate this message if it addressed some or all of your question/issue.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2006 06:08 PM
Hello,
It could be the setup on the remote end or probably the mo of ws_ftp as per this link:
wsftp_forum@list.ipswitch.com/msg02184.html')">http://www.mail-archive.com/wsftp_forum@list.ipswitch.com/msg02184.html
Thanks
Karar
