Problem connecting to FTP servers through ISA 1

[Nifty1]

Hi,

I have just read a post from Len in Aug 2002 on this forum. He had the same problem then that I have now. I have repeated his description of the problem below.
I have a problem accessing an FTP site when I have the firewall client enabled. I have the same problem whether I use IE are another FTP client program. It hangs when access folder information from the site. However, if I disable the firewall client (basically bypass the ISA server) I can get into the site with no problem. Also, if I just use the dos based FTP program, I can connect with no problem, even through the firewall client.
I hope someone can help me out because I can not figure out what the problem is. Thanks!

 

[eman28]

I'm having a somewhat similar problem. I'm using SmartFTP, and whenever I use the Firewall Client, I have no problems. However, if I turn the Firewall Client off and try to use the proxy server settings, I can't connect to any sites. It's kinda the opposite of what you described above. I have tried all teh different proxy configurations (socks4, sock5, https, etc...) and none of them work. Only when I set it to no proxy server and enable the Firewall Client do any of the ftp connections work.

I'm trying to actually move away from the Firewall client in my enterprise, as it bypasses all the rules on the ISA Server and we need to lock this down, but still provide needed services, such as FTP. Please help

 

[lbicher]

Hi,
This is Len from the Aug post. I have recently found the answer (but forgot I even posted the question . This is caused by the differences between active and passive FTP connections. Some proxies apparently do not like one or the other. In my case, the solution for using IE to access FTP sites through an ISA server was to go to Tools -> Internet Options in IE and go to the Advanced tab. There are two options in the Browsing section that can apply here. One is Enable Folder View (enabled by default) and Use Passive FTP (disabled by default). I found that if I unchecked Enable Folder View, I could get right into the FTP site, but it was just a directly listing. I could get files easily but uploading was a different story. Then I found that if you turn that back on and then enable Use Passive FTP, the I could get into the ftp sites using folder view.
I also found that different versions of IE are set up differently. The above works with IE 6.0. Some of the earlier versions, 4.0 5.0 not sure about 5.5, do not have the option to use passive ftp. I have found out that the older browsers were not cabable of passive FTP. Also, any third party FTP client would need to be able to use a passive ftp connection or it will not work through an ISA server.
I hope that helps out some. If you have any further questions, please let me know.

Len

PS:
Oh yeah, almost forgot to mention this. My IE 6.0 is the one that came with Windows XP service pack 1. If I recall correctly, the base IE 6 on XP with no service pack did not have these options. Also, it is running 128 bit encryption. I don't know if that makes a difference or not.

 

[Danlynch]

Hello

I have tried checking these settings but I am getting this error message informing me that any ftp site is read only and that the proxy server is not set to allow full access. This is when I point a client at the ISA server. It will let me ftp from the ISA server itself.

Can anyone help, I have set up a protocol rule to allow ftp access and the ftp port are open on the firewall.

Thanks

Daniel.