Accessing FTP servers through ISA - issues
I am running Windows 2003 Server SP2 with ISA 2004 SP3.
My clients are running Firewall Client 2004
With Windows 2003 SP1 and ISA 2004 SP2 the FTP was working fine. (FTP is unticked in ISA so not "read only")
I installed Windows 2003 SP 2 and it broke the server. I reinstalled both Windows+ SP2 and ISA+ SP3 (imported previous settings) and I then applied the patch to disable RSS as well as doing the two hacks to disable it according to the website here http://support.microsoft.com/kb/936594
That changed my error from FTP being Read Only to to the "Windows cannot access this server: a connection to the server cannot be established"
I am running IE 7 and this is through the Windows Explorer interface. (Tried Passive ticked and unticked)
When I try at the command line I get
ftp: connect unknown error number
FROM the ISA server itself I can connect Via both the command line and Windows Explorer so it seems to be a client issue. I thought the Firewall client was suppose to allow active FTP but it is like it isn't working. (it is configured properly)
I have read all the solutions and from what I have read the above patch should fix the problem. I am baffled.
Is there anything else to try. I rely on FTP to upload and download files.
Answers
I finally got it working. It was a NAT rule that I didn't add the extra external network under Network Rules. We have a IP range that is at our Head Office. It is a public range so I added it as an external network. Sometimes I need to give access to people in that network to access inside our network. It is where all the FTP and Outlook servers reside.
Thanks
Lara
- Marked As Answer byKeith AlabasterMVP, ModeratorWednesday, December 31, 2008 5:20 PM
All Replies
In my opinion, check the ISA logs to see what it says the error is there when you try to FTP. Post it here, lets see from there.
D.
I suggest the following
1- On one client remove the firewall client and make the client secure nat and try the FTP
2- Install the firewall client again and check the issue ,
How do I setup Secure Nat and what is it? I have uninstalled and reinstalled the Firewall client a lot of times with no success. Does it work with FTP through Windows Explorer?
I finally got it working. It was a NAT rule that I didn't add the extra external network under Network Rules. We have a IP range that is at our Head Office. It is a public range so I added it as an external network. Sometimes I need to give access to people in that network to access inside our network. It is where all the FTP and Outlook servers reside.
Thanks
Lara
- Marked As Answer byKeith AlabasterMVP, ModeratorWednesday, December 31, 2008 5:20 PM
Hi
good to hear that your issue is resolved
By the way Secure NAT means configure Client with ISA IP as Default Client
You can also create computer or computer sets in Toolbox + Network objects and point to the IP of the FTP server/destinations.
