I applied this config and it is currently working with port/active mode - no problems thus far
access-list ftp_inspection permit tcp host x.x.x.x x.x.x.x 255.255.255.248 eq ftp
class-map inspect_ftp
match access-list ftp_inspection
policy-map global_policy
class inspect_ftp
inspect ftp...
can i implement ftp inspect only on one vpn tunnel and not affect other ftp traffic? i am nat'n the ip and the remote ftp end is rejecting it per the source ip not matching the nat'd ip. i was told to use ftp inspect but i dont want to create more problems. our default is active ftp
this is my...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.