ASA5520-Access to FTP site

I thought I would run this by the forum in case there is someone out there who experienced the same issue.  I have users behind an ASA5520 firewall running 8.x code who are unable to access a particular ftp site through a web browser or an ftp client such as FileZilla.  Keep in mind that other ftp sites are accessible.  I was notified of this as it worked in the morning of a particular day and then stopped working in the afternoon on the same day.  Accessing the site from our guest network(different firewall) is possible.  The SysAdmin insists it is a firewall issue.  I have run the packet tracer on the firewall and the traffic is allowed.  FTP inspection is configured.  I get the same results when I try to access with IE or Firefox.  Anyways, I thought I would post the questions to see if anyone has seen something like this before.  If anyone is interested, the site is ftp://authordev.healthstream.com.  TIA for any help or advice.

Hi,
You could always take a packet capture on the firewall and/or on the actual host to see where the communication stops.
You could for example configure the ASA to capture the traffic between the client and the server.
Example configuration could be
access-list FTP-CAP permit ip host host
access-list FTP-CAP permit ip host host
capture FTP-CAP type raw-data access-list FTP-CAP interface buffer 10000000
You could naturally also capture the traffic on the internal side of the firewall if you want to compare the 2 captures on both sides of the firewall
access-list FTP-CAP-INTERNAL permit ip host host
access-list FTP-CAP-INTERNAL permit ip host host
capture FTP-CAP-INTERNAL type raw-data access-list FTP-CAP-INTERNAL interface buffer 10000000
You can then use the following command to confirm if traffic is captured
show capture
You can use the following command to show the capture on the CLI
show capture FTP-CAP
show capture FTP-CAP-INTERNAL
I would suggest copying the actual captures to your computer with following commands and then viewing the contents with Wireshark
copy /pcap capture:FTP-CAP tftp://x.x.x.x/FTP-CAP.pcap
copy /pcap capture:FTP-CAP-INTERNAL tftp://x.x.x.x/FTP-CAP-INTERNAL.pcap
You can remove the captures from the ASA with
no capture FTP-CAP
no capture FTP-CAP-INTERNAL
The ACLs will have to be removed separately.
These captures should give you a picture what happens to the FTP connection.
- Jouni

Similar Messages

  • Unable to access FTP Site via internet

    Hello All,
    Here is a problem that I'm facing accessing my home deployed FTP Server on Windows 2008 Server via internet. Below is the description of setup at my home.
    1. I've a private network behind D-link DSL 2750U router.
    2. I've forwarded Port 21 to my FTP Server in private network (FTP Server IP: 192.168.1.2)
    3. FTP Site is deployed in IIS 7.5 with Anonymous access rights (so obviously no username and password is required to access it).
    4. In IIS 7.5, FTP Site binding is set as "
    5. I'm able to access my ftp site within private network (via command prompt and any browser).
    6. I've registered a domain name ftp.tx-fr.tk for my FTP site so that I can use it from outside world and here are settings.
    7. I'm able to ping this (ftp.tx-fr.tk ) domain name.
    8. All firewalls are disabled for testing purpose (Will implement security later, once primary issue resolves).
    Now here is the problem, whenever I type in ftp://ftp.tx-fr.tk in my browsers,
    IE 9 and Chrome prompts for username and password, whereas Mozilla throws a message as "421 Login Incorrect".
    Same happens when I use command prompt to access the FTP site using domain name.
    Here is the funny part, when I'm prompted for username password, I typed in router's credentials (U:admin, P:admin) and I get
    "Internet Explorer cannot display the webpage" in IE 9, "421 Login Incorrect" in Mozilla.
    Whereas when CMD is used to access the site, I'm able to log in using router's credential but none of the command executes
    Now is there anyone who can assist me resolving this case?
    Kind regards,
    Aniruddha

    I would have ask in IIS forums: http://forums.iis.net/
    Thanks

  • Safari doesn't open ftp site

    Every time I try to access a ftp site through safari it opens firefox. It used to open the ftp site but now it doesn't work. Any suggestions? I'm using version 2.0.4
    Thanks

    Avast is the problem. This is a list of links for threads regarding Avast and the issues it can cause on your Mac  > Community Search: Apple Support Communities
    Follow the instructions for uninstalling Avast >  How to remove Avast Antivirus from a Mac
    If you really want to have anti virus software installed on your Mac, try Free Antivirus for Mac Tool Download | Sophos
    Do not install Sophos before completely removing Avast.

  • Files on FTP site won't load

    My goal is to link together a course, a quiz for the course,
    and a course survey that are all going to be hosted on a
    password-protected FTP site. My first attempt to do this was by
    going into movie preferences and pointing movie 1 to movie 2 and so
    on. This works locally and it works if I put all files in the root
    of the FTP site, but if I put the files in a subfolder (making the
    appropriate path changes in the movie and republishing them), movie
    1 ends and doesn't load movie 2. Using sub-folders is neccessary to
    avoide confusing learners who will be accessing the FTP site.
    I also tried using the Captivate Player and as with the other
    method, it works locally. Regardless of where on the FTP site I put
    the files, none of the movies load.
    It seems to me that this is a problem that I'll have to take
    up with my Network Admin, but it's Sunday and I was hoping that one
    of you had an insight that could help me fix the problem today.
    Michael

    Don't apologize, Michael, we've all been "stressed out". You
    said . . .
    quote:
    1. I published a movie to the FTP site as an SWF file, and when
    I ran the HTML file for the movie, the movie ran. I then published
    two movies to the site as SWF files that are linked together (the
    first one linked to the second one in the movie preferences), then
    I ran movie A. It ran and and then movie B started.
    Good. Step 1 mission accomplished!
    You said . . .
    quote:
    2. I created a sub-folder in the FTP site and placed the linked
    SWF files there. Movie A runs, but movie B doesn't run when movie A
    ends.
    Taking you at your word, you
    placed only the SWF file in the sub-folder, so the link was
    broken - thus, the 2nd movie
    couldn't run.
    You said . . .
    quote:
    3. I published three movies to the root of the FTP site as SWF
    files. I also uploaded the Captivate Player files to the site. I
    modified the Player XML file so that the 3 SWF files are being
    used. When I load the player, the menu shows the three movies, but
    none of them will load.
    Check the other Captivate Player files. Sounds
    like something got left out when you either 1) configured Captivate
    Player, or 2) uploaded the Captivate Player support files. From
    what you said here, it sounds like it is Captivate Player that
    isn't running, not the movies in the XML. You might double-check to
    see if you are opening the "Index.HTML". Matter of fact, you might
    even want to change the name of Index.HTML and link to the new name
    . . . it won't fix this problem, but after you get it fixed, you
    might find that renaming Index.HTML will eliminate some confusion.
    Just a thought.
    Overall Michael, it sounds to me like you are really tired
    and expecting too much of yourself in that state. Take a fresh look
    at it after getting some rest and a new perspective. Just another
    thought, but this one is even better than the first.
    .

  • When accessing an site vis FTP, is it possible to view the ftp site in page mode or in some fashion that will allow file editing?

    I can use Microsoft Explorer to edit my web site in ftp mode. They provide the feature under the right side screen "Page" and then drop down to the bottom - "open FTP site in page mode" or in Windows Explorer. This will allo editing and moving of ftp site files. It does not seem possible to do this with firefox. I can access my site via ftp with Friefox but cannot edit, move, delete, upload, etc.

    I can use Microsoft Explorer to edit my web site in ftp mode. They provide the feature under the right side screen "Page" and then drop down to the bottom - "open FTP site in page mode" or in Windows Explorer. This will allo editing and moving of ftp site files. It does not seem possible to do this with firefox. I can access my site via ftp with Friefox but cannot edit, move, delete, upload, etc.

  • Unable to access ftp sites

    FF 32.02 on Windows 8.1 Pro 64-bit. Attempting to access ftp site produces the following error message popup:
    211-Features:
    AUTH SSL
    AUTH TLS
    EPRT
    EPSV
    MDTM
    PASV
    PBSZ
    PROT
    with the following page displayed after acknowledging the popup:
    The connection was reset
    The connection to the server was reset while the page was loading.
    The site could be temporarily unavailable or too busy. Try again in a few moments.
    If you are unable to load any pages, check your computer's network connection.
    If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.
    Cuting-and-pasting the same URL into IE 11.0.9600 results in the page displaying with no problems. Therefore, there is none of the 3 suggestions is the problem.

    The county ftp site doesn't act strangely for me.
    I'm not sure whether these general suggestions are applicable to ftp sites, but just in case:
    When you have a problem with one particular site, a good "first thing to try" is clearing your Firefox cache and deleting your saved cookies for the site.
    (1) Bypass Firefox's Cache
    Use Ctrl+Shift+r to reload the page fresh from the server.
    Alternately, you also can clear Firefox's cache completely using:
    "3-bar" menu button (or Tools menu) > Options > Advanced
    On the Network mini-tab > Cached Web Content : "Clear Now"
    If you have a large hard drive, this might take a few minutes.
    (2) Remove the site's cookies (save any pending work first). While viewing a page on the site, try either:
    * right-click and choose View Page Info > Security > "View Cookies"
    * (menu bar) Tools > Page Info > Security > "View Cookies"
    In the dialog that opens, you can remove the site's cookies individually.
    Then try reloading the page. Does that help?

  • Setting up ftp access to my site

    I am using DW CS4 to create 3 low traffic sites and am serving the sites from my home desktop iMac.  I setup Virtual Hosting to allow access to my sites.  I am now trying to allow others to edit parts of the site and I believe that I must enable ftp access to the site.  I have enabled port forwarding of port 21 on my router but I am having problems.  I do the following to check ftp connection.
    In Terminal I enter  "telnet www.mywebsitename.com 21"  The response comes back "Trying (myIPaddress)...
    telnet: connect to address (myIPaddress): Operation timed out
    telnet: Unable to connect to remote host"
    I am reasonably sure that I must get this to work before I attempt to redefine the remote site definition using ftp within Dreamweaver CS4.
    Please be relatively simple with suggestions or questions, I am well aware of the fact that I am a bit of a novice trying to do rather complex things.

    Thanks for your help, I now have ftp access to my site working OK.  I 
    have redefined the site using ftp in the Dreamweaver site definitions 
    and I can upload changes with no problem.  However, i am now trying to 
    setup InContext editing capability to the site. W hen I go thru the 
    steps to add a site to the InContext Admin section the first steps in 
    the process work fine.  I am able to fill out the ftp settings with my 
    username and password and when I test the settings it comes back that 
    it is able to connect to the site.  The next step is where I run into 
    problems.  When I try to add the assets I get an error that says 
    either the folder does not exist or the user does not have the proper 
    permissions to open the root folder.  I have attached a screen shot of 
    the actual error message if it helps.  This is the odd thing.  I can 
    use the same username and password with another ftp Client program and 
    I have complete access to the root folder and all the files in it.  It 
    seems that if I have adequate permissions to view and change the root 
    folder with a generic ftp client program I ought to be able to open it 
    thru the incontext setup.  By the way the username and password I am 
    using to try to get this initially setup is the administrator username 
    and password for my server, so it seems to me there should not be a 
    permissions problem.
    Am I missing something obvious?
    Steve
    Here is the error log.  Note:   www.sonautosales.com is the name of 
    the root folder on the server.

  • How to connect to Access DB on FTP site

    How can I connect to an Access DB that resides on an FTP Site?  I can connect to it, but it downloads the database as a temporary internet file.  I am wanting to dynamically update the data on my reports (and subreports) with updated data on the FTP site.  Is this possible?  Can I set up a connection string or ODBC connection to the database?  I have been trying various things for some time and cannot solve.  I am using Access 2003 database and Crystal 2008.

    Hi,
    Try not to access or connect to FTP, it usually download the data since you accessing FTP, try to look for other ports like http to access the database.
    Regards,
    Clint

  • I'm modifying someone else's website for the first time (noob = yes).  I only have ftp access to the site server.  Before uploading changes, is there a easy/quick/recommended/etc way to make a copy of the files I'm about to replace?

    Great, first post, sorry for the title.  But to repeat it:
    I'm modifying someone else's website for the first time (noob = yes).  I only have ftp access to the site server.  Before uploading changes, is there a easy/quick/recommended/etc way to make a copy of the files I'm about to replace?

    You can use the Dreamweaver FTP (or a different FTP client) to completely copy the original website to your development computer, then, before making changes, you can copy the whole thing to a directory called something like "website original"
    If you want to run both the old and new sites on the remote server, this is often possible. Add a folder/directory to the server and call it something like "new" and upload the new files there until you are ready to replace the old site
    All of this you can do with FTP

  • I cannot access ftp sites even after loading "Seahorse/fireFTP". What do I do next?

    I need to access and upload info to an ftp site but I get an error message each time I do. It doesn't work in IE either. How can I access the site

    ... I really can't afford to go back and re-buy all this music (which I shouldn't have to do in the first place).
    No you shouldn't. Bear in mind, though, that Apple has set this up as a user-to-user board so all we can do here is try to help you figure out why the authorization procedure isn't working correctly for your new computer.
    There have been a variety of issues reported with iTunes and Windows Vista, some I believe related to the authorization procedure. So the first thing I'd do is make sure you've downloaded and installed iTunes 7.1 which was just released yesterday.
    That may solve your problem. If not, click on the Review Authorization Count link in the Why can't I authorize one of my computers? section of this Apple Support page and let us know how many authorizations you're using.
    Be patient and we should be able to figure this out.

  • Access problem to FTP site

    I've set up my FTP site and it works perfectly since the past two years with WSFTP on PC
    Now, I have a Mac book And I'm unable to connect to my FTP server with the @connect to server@ link in the finder
    I run OSX Server 10.3.9 PLZ help... It's kind of unusual to have a problem from mac to mac and no problems from pc to mac...

    You could try to upgrade the router's firmware. Use for new firmware is to fix bugs that have been discovered with the router. Try to download here. That would link you to Linksys download page for new firmware of a version 2 BEFW11S4.

  • How can I find out the server port for a secured FTP site and creating a FTP Connection Manager

    I have to create a FTP Task to go out and get the files that our 3rd party vendor will be dropping on a secured FTP site. I have all the credentials to access that Secured FTP Site and have successfully done so through FileZilla.
    Now I need to set-up a FTP Task to go out and get their files and in so doing create a FTP Connection Manager. Is there any way I can determine the
    Server Port number from the Secured FTP site? I let it default to 21 and tried the Test Connect and it failed.
    Thanks for your review and am hopeful for a reply.

    Hi ITBobbyP,
    SSIS has a built in FTP task, while this only works for the FTP protocol, it doesn’t support SFTP. But there are some free clients like WinSCP and
    SSIS SFTP Task Control Flow Component
    available in the CodePlex which can invoked from SSIS.
    References:
    SSIS SFTP Task Control Flow Component approach
    WinSCP approach
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • Changed Adobe ID can no longer access BC live site

    Hi
    Having some problems with my Creative Cloud / BC site. I created a Muse site and pushed it live with my CC subscription. I then had to change my Adobe ID due to my old domain expiring (ensure I receive emails etc). Since changing the Adobe ID I can no longer access my live site in BC. Any changes in Muse create a temp site in BC / CC under my new Adobe ID and it is not possible to push these live or assign them to my original live site, which is still hosted by Adobe.
    I have tried to swith accounts in Muse but this doesn't work. I've also tried to FTP the changes but cannot get this method to work either.
    I'm sure others must have experienced this issue and would really like to know how or if they managed to resolve the problem. Not having any visibilty of my live site is worrying and I desperately need to establish a connection back in Muse between it and my BC account. I'm not a web developer I'm a cameraman so I need simplicity which is why I opted for Creative Cloud in the first place.
    Thanks in anticipation for any assistance.
    Best
    Will

    Hi Will,
    Not sure in this case as it appears the user ID is just not syncing. 
    I would recommend reaching out to our chat support with this issue to look into your account and to verify your login details. 
    http://helpx.adobe.com/contact/index.html (Select BC or Muse for chat support).
    Kind regards,
    -Sidney

  • How do I set a user to access with ftp to his/her website folder ?

    I am new to MacOSX
    I come from Linux Server administrated with Virtualmin
    I was able to setup with SLP 10.6.8
    Now everything works but ftp ...
    I want to do this:
    1) web site domain1 = OK
    2) mail user@domain1 = OK
    3) mysql access user(domain1) = OK
    ---> 4) ftp user(domain1) = home web site domain1 = NOT OK ! <---
    How to tell server to let user(domain1) access throught ftp and jump into his/her home site folder ?
    This is necessary for me to grant access to his/her site home and upload, modify stuffs etc ...
    Also I am using cms like Drupal, Wordpress and so on that can upload and install upgrades via web admin panel and with MacOSX isn't working !
    Gimme some hints please Server Admin is too poor and I had to manually add user and link to relative services ... now i am stuck on ftp ...

    It is in the process of being disabled. It will likely be some time next week before the code will be reverted.

  • Cant open ftp site on ipad

    Hello. I have to figure out a way to allow ipad users to open a specific ftp folder from our ftp site on their ipads. so far when i attempt to open the ftp url safari tells me i have no permission. if i try it at my computer it works properly and prompts me for a password. the only option i have found is to give these people access to the whole ftp site via one of the many ftp apps out there. the problem with that is they may end up deleting something they shouldnt or seeing something they are not supposed to have access to.
    ftp://[email protected]/CEB%20Joint%20meeting%20October%2017   is the url

    Try to reset it by holding the power and home buttons at the same time until you see the Apple logo, then release.

Maybe you are looking for