CS-ACS SE FTP "active" mode

Dear,
The CS-ACS SE unit seems to enforce passive-FTP
when sending backup sets or retrieving CSV files.
The FTP server (Unix based) mandatorily uses
IPFilter to protect us from unauthorised accesses,
and the passive-FTP mode is quite awkward. (IPFilter
does not have the intelligence to work gracefuly
with passive-FTP).
Is it possible to change/control the way
CS-ACS-SE works:
a/ Could it be set to use "active" FTP?
b/ If only passive-FTP: can we restrict t
the port range used to a small
predictable range?

I don't remember coming across an option where choosing between active and passive mode FTP is possible. You could consider changing the filter to permit/drop based on IP only and leave the port info out.

Similar Messages

  • FTP client is not working in active mode

    Hi,
    I have a ftp issue trying to download iweb files.
    My provider enabled me a ftp access.
    I tried to connect to it with transmit or rbrowser ftp client (passive mode disabled). The connection works well but i can not retrieve the list of files.
    However using my PC and filezilla ftp client in active mode, the connection did work properly.
    Any idea to help make this connection work on my mac ?
    Thanks

    Perhaps this will help...
    http://slacksite.com/other/ftp.html
    "The main problem with active mode FTP actually falls on the client side. The FTP client doesn't make the actual connection to the data port of the server--it simply tells the server what port it is listening on and the server connects back to the specified port on the client. From the client side firewall this appears to be an outside system initiating a connection to an internal client--something that is usually blocked."

  • How to  Connect to ftp server in active mode using the finder

    How can I can I use the finder command "connect to server" to connect to a ftp server using the active Mode. With Cyberduck I can connect to this server only in active mode. Apparently the connect to server command uses the ftp passive mode.
    Or is it an other way to mount on the desktop a ftp server in active mode?
    Thank you

    Passive mode can be disabled in your network settings, but I have a feeling what you're actually asking for is the ability to upload, and the answer to that is the Finder can't do it. There are some filesystem plugins out there that provide this functionality, but they cost money.

  • BPEL FTP Adapter Active Mode

    Does BPEL FTP Adapter supports active ftp mode (instead of passive). Apparently the ftp site for one of the Interfaces uses FTP Adapter and that ftp server it is using supports ONLY active ftp sessions, NOT passive.
    Want are configuration to made to changed to support active mode
    oc4j-ra.xml for ACTIVE ftp and not passive

    Thanks Everybody for the prompt response .
    1) What error does one get when trying to connect to FTP Sever which only support active mode
    No Error , but no file transfer happens. SR and Bug Request for the same is already in place .
    QUESTION
    ========
    Does BPEL FTP Adapter supports active ftp mode (instead of passive).
    ANSWER
    ======
    No, FTP Adapter only supports passive mode. For that purpose there is an Enhancement Request
    already, the Bug 6866124 - NEED SUPPORT FOR PASSIVE FTP ADAPTER AND CUSTOM FTP
    COMMANDS :
    1. The FTP Server needs to be active for the Adapter to work. So, both FTP Server and the FTP adapter must be active for it to work.
    Also you only support PASSIVE mode in our FTP JCA adapter. ACTIVE mode is currently
    considered bad practice and a security vulnerability.
    But, we would require both ACTIVE and PASSIVE modes.
    2. Custom commands are not supported. But, we need the samples for custom FTP Commands and support for it.
    for example: quote site fixrecfm 90...

  • Any way to set "active mode" for FTP, or to use sFTP instead?

    I have a web host that does not support passive FTP mode.   I need to either set the mode to be "active mode", or I need to use secure FTP (sFTP).  Is there any support for either of these within Muse?

    Hi
    By default , Adobe Muse FTP option uses " Passive Mode" , I am afraid its not possible to switch to "Active Mode" or to switch to Secure FTP. Alternatively, you may export the site locally using " Export as HTML " and then you may use third party FTP client to upload the site to your third party hosting using Active or Secure FTP.
    Let me know if you have any further query.

  • Active mode FTP access

    Hi,
    I have some problems accessing my hosted FTP server. It is hosted on Windows NT so Active Mode FTP is needed. However, when I access I can login but it will not conduct a directory listing. I tried the Terminal as well as Transmit applications. From a windows machine on same LAN it works. My FTP host claims it is a local issue which seems to be true.
    Searching the forums it seems as "disabling firewall" would make it work. I did that, but it does not work still.
    The error display in terminal is as follows:
    My-iMac:~ troels$ ftp -A XXXXXXXXXX.dk
    Connected to XXXXXXXXXX.dk.
    220 Microsoft FTP Service
    Name (XXXXXXXXXX:troels): xxxxx
    331 Password required for xxxxx.
    Password:
    230 User xxxxx logged in.
    Remote system type is Windows_NT.
    ftp> ls
    200 PORT command successful.
    150 Opening ASCII mode data connection for /bin/ls.
    ftp: Poll timeout waiting before accept
    425 Can't open data connection.
    500 '?ABOR': command not understood
    ftp>
    Thanks in advance.
    Best
    Troels

    I think given that my router's NAT and SPI act as a robust firewall, I may as well just turn the OS X firewall off and 'solve' this problem.
    Thanks for your help,
    J
    G5 Dual 2.0 (rev.B); 1.5 GB RAM; 160/250 GB HD   Mac OS X (10.4.7)   Ati Radeon 9600 XT; Smart-UPS 1500 VA; Dell 2007WFP LCD - MacBook 1.83 GHz

  • Some FTP servers require active mode for connection.

    Is there any option for select active mode during FTP server connection in iweb ?

    No, but go and Click on the Apple symbol on your Mac and then open System Preferences.  Once is System Preferences go and open Network and then in the bottom right corner of Network click on Advanced and then click on Proxies and at the bottom of the Proxies page there is a setting called passive ftp mode that might be check by default.  If it is, then try unchecking it and then uploading your site with iWeb ftp and seeing what happens.
    If this does not work, then your other option of course is to publish your site to a local folder from iWeb and then use something like Cyberduck to upload your site.

  • ACE FTP problem in active mode

    Hi everyone,
    i have a problem with active ftp (passive ftp works fine).
    here is my conf :
    access-list ANY line 8 extended permit icmp any any
    access-list ANY line 16 extended permit ip any any
    rserver host ftp1
      ip address 10.0.151.131
      inservice
    rserver host ftp2
      ip address 10.0.151.132
      inservice
    serverfarm host ftp
      transparent
      failaction reassign
      rserver ftp1
        inservice
      rserver ftp2
        inservice
    class-map match-any vip
      2 match virtual-address X.X.X.X tcp eq ftp
    policy-map multi-match LBPOL
      class vip
        loadbalance vip inservice
        loadbalance policy lbpol
        loadbalance vip icmp-reply active
        inspect ftp
    interface vlan 1000
      description public-side
      ip address Y.Y.Y.Y M.M.M.M
      no normalization
      no icmp-guard
      access-group input ANY
      service-policy input REMOTE_MGMT_ALLOW_POLICY
      service-policy input LBPOL
      no shutdown
    interface vlan 100
      description private-side
      ip address 10.0.99.160 255.255.0.0
      service-policy input REMOTE_MGMT_ALLOW_POLICY
      no shutdown
    on both hosts, i added X.X.X.X vip and the good rule/route with iproute2.
    as i said at the beginning, passive ftp is ok. active is not.
    while in active mode, i can connect to the ftp but any list/put/get fails.
    any idea ?
    MA

    One thing I don't understand here is why do you have
    serverfarm host ftp
      transparent
    With this in place the ACE will not rewrite the destination IP and the server will receive a packet destined to the VIP. This is not very common, but it can work. The rest of your config seems to be fine, except the missing lbpol policy.
    Which sw version are you running?

  • How to check the DTP status (i.e in active mode or not) for the Prior days.

    Hi SAP gurus,
    How to check the DTP status whether it was in active mode or inactive mode for the prior days ?

    Hi Aditya,
    Kindly have a look into below links,
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/00dbbfa9-dba2-2d10-bc80-9d6489e4b1c7?QuickLink=index&overridelayout=true
    DTP request Overall status
    Hope this helps.
    Regards,
    Mani

  • Is it possible to configure NLB clustering in Active/Active mode.

    Hello Guys,
    Just wanted to know If I can manually configure my NLB cluster to work in ACTIVE/ACTIVE mode as we can do for Microsoft fail over clustering.
    Thanks & Regards
    Amit Pal Singh

    Hi Amit Pal Singh,
    I think you must some misunderstand about the failover and NLB, I assume you are trying to install the Failover cluster, you can refer the following article to install the
    A-A failover cluster.
    Creating an Active/Active SQL Cluster using Hyper-V: Part2 the Clustered Instances
    http://blogs.msdn.com/b/momalek/archive/2012/04/11/creating-an-active-active-sql-cluster-using-hyper-v-part2-the-clustered-instances.aspx
    More information:
    How Network Load Balancing works
    http://technet.microsoft.com/en-us/library/cc738894(v=ws.10).aspx
    I’m glad to be of help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • To apply license in FWSM (Active-Active mode) and disable failover

    Dear Team
    I want to apply license to increase security context in FWSM which is running in Active-Active mode on VSS Core switches
    As per below document, first we need to disable failover by entering 'no failover' command on active FWSM and then apply the license seperately on both FWSM.
    I just want to know when i will disable the failover then standby move to pseudo-standby state. 
    Will there be any services impact which are running behind the FWSM when disbaling the failover and then re-enabling the failover.
    http://www.cisco.com/c/en/us/td/docs/security/fwsm/fwsm40/configuration/guide/fwsm_cfg/swcnfg_f.html#wp1073226
    Appreciate your response.

    Hi,
    I think in your case as it is Active/Active , there is one extra step required.
    You need to make all the contexts active on one unit and on the other one all should be standby.
    Then disable the failover and update the license and re-enable the failover.
    Thanks and Regards,
    Vibhor Amrodia

  • FWSM OS upgrade in Active/Active mode

                       Hi All,
       Can you please share me the procedure to upgrade FWSM in Active/Active mode with minimum downtime.
    Regards,
    Ajith

    The procedure is documented in the configuration guide here.

  • How to unlock the SIM in activation mode for iPhone 4s

    After Remote Erase iPhone 4s can not activate it anymore. Through WiFi it says try again later or through itunes, and through itunes it asks to unlock the SIM which i can't in activation mode. How do get out of this loop thanks

    Take out the SIM card and insert it into another phone. Then deactivated the SIM lock and put it back into the phone you want to activate.

  • HT204389 IPad is in "voice activation mode" and it will not open.  I did not change any settings.

    IPad Air -32 suddenly is working in "voice activation" mode.  The ipad is locked and I cannot figure out how to unlock it.  Using  OS7.1-Any thoughts?

    Try triple clicking the home button.

  • FTP Activity - mget multiple files with dynamic names

    Hello All
    Hope all is well.
    I was wondering if there was a way to configure FTP activity to transfer multiple files with dynamic names from source location at daily intervals.
    For example, my source files are affixed with date values (source_filename_<mmddyyyy>_<hh>.txt):
    source_filename_12252009_00.txt
    source_filename_12252009_06.txt
    source_filename_12252009_12.txt
    source_filename_12252009_18.txt
    What I would like my process flow to do would be to download just these 4 files once daily based on a dynamic ftp script as follows:
    open ${Remote.Host}
    ${Remote.User}
    ${Remote.Password}
    cd ${Remote.RootPath}
    prompt off
    mget ????????
    quit
    In DOS batch script you would have the mget command with a wildcard as:
    mget source_filename_%DATE:~0,2%%DATE:~2,2%%DATE:~4,4%*.txt
    How does one go about implementing this in OWB? Does it require a user defined substitution varilable of some sort?
    FYI, I am using version 10gR2.
    Cheers.

    Hi ,
    If you are able to achieve your objective from a DOS batch script then you can call that script for an User Defined Activity in OWB process flow .
    Hope this helps.
    Thanks,
    Sutirtha

Maybe you are looking for

  • How to monitor ODI in Grid Control

    Hello We are using Grid Control 11.1.0.1.0 and ODI 11.1.1.5.0. We were previously using a grep command on the server that ODI was running from to monitor if it was up or not. Since the (OEM) upgrade we have lost this metric and would like to take a m

  • HELP: Oracle VM Manager 3.1.1  VM Server Status Running (Error)

    Hi All, I have updated the latest patch of VM Manager 3.1.1. In my server pool, I have 3 VM servers. All VM Server shows Status Running (Error). I don't care about the small red x icons displayed on the VM Manager but it stops all my operations: 1. N

  • Table Data Display

    Hi Friends, I am executing an RFC and getting data. I am displaying the data on table  as below shown.  but I do not want to show this way: Employee     Value Name1          23 Name1          21 Name1          20 Total          64 Name2          10 N

  • Transport to Productiion Server

    Hi Experts. I have created a flow service in Business Connector and need to transport it to Production server, I have no idea related to transport of business connector services. can anyone please tell me how to transport it to PRD and what are the s

  • I am trying to download iTunes to a PC.  I hit Download.  It says Thank your downloading, etc.  It asks 'Save?'  But it doesn't appear in my Downloads.

    I am trying to download iTunes to a PC.  I hit Download.  It says Thank your downloading, etc.  It asks 'Save?'  But it doesn't appear in my Downloads.