Unable to access FTP site in ISA2006

Home Forums Security General Security Unable to access FTP site in ISA2006

This topic contains 11 replies, has 3 voices, and was last updated by  gforceindustries 9 years, 11 months ago.

Viewing 12 posts - 1 through 12 (of 12 total)
  • Author
    Posts

  • sandy2810
    Member
    #137006

    Guys,

    We are unable to access ftp site ftp://ftp.dow.com through ISA 2006. All our clients are configured as web proxy clients. The FTP site cannot be access anonymously. Authentication details are provided to us by the site admin but users get page cannot be displayed
    “Error Code 10061: Connection refused
    Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.

    I read an article on Microsoft and tried enabling FTP view outside Internet explorer but users still cant access. I tried installing Firewall client on one of the users just to check and it works fine but we cant do this for all users.
    ISA is currently configured to allow full outbound access to the internet with all ports open.
    Is there any other option which needs to be enabled for clients configured as web proxy. I also happen to come across an article which stated that web proxy clients cannot access FTP in ISA, only firewall client users can is this true?


    sandy2810
    Member
    #237817

    Re: Unable to access FTP site in ISA2006

    Just for your info we also get the following error while accessing the site.
    “Error Code: 502 Proxy Error. The login request was denied. The logon account might have been disabled or logon information might have changed. Log on again to verify that the information was typed correctly. If the problem continues, report the problem to the administrator of the Internet server you are requesting. (12015)”

    #341766

    Re: Unable to access FTP site in ISA2006

    sandy2810;134122 wrote:
    only firewall client users can is this true?

    Yes. Install the client and it’ll work.


    Dumber
    Member
    #198797

    Re: Unable to access FTP site in ISA2006

    Please review:
    http://technet.microsoft.com/en-gb/library/bb794745.aspx


    sandy2810
    Member
    #237818

    Re: Unable to access FTP site in ISA2006

    gforceindustries;134145 wrote:
    Yes. Install the client and it’ll work.

    We have around 600-700 users on our lan and installing firewall client for all users only for FTP is not an feasible solution. I understand that we need firewall client if we want to upload, but for only dowloading stuff from FTP web proxy should work.
    Any other solution please.


    sandy2810
    Member
    #237819

    Re: Unable to access FTP site in ISA2006

    Dumber;134164 wrote:

    Thank you for your reply i went through the article but cudnt find a solution as none of the steps worked out.

    #341827

    Re: Unable to access FTP site in ISA2006

    sandy2810;134432 wrote:
    We have around 600-700 users on our lan and installing firewall client for all users only for FTP is not an feasible solution

    Fair enough. FYI, you can push the software out using Group Policy – it will be installed automatically the next time a computer boots up.

    Also, you can edit your posts – you don’t need to post twice in a row.


    sandy2810
    Member
    #237820

    Re: Unable to access FTP site in ISA2006

    Thanks for the info mate but installing firewall client would be our last option. We would want FTP to work in web proxy mode. We have also tried different options suggested in technet article and through different forums like entering authentication details while accessing FTP site, changing the enable ftp view outside IE etc etc.
    We have now opened a call with Microsoft and waiting for their reply.


    Dumber
    Member
    #198864

    Re: Unable to access FTP site in ISA2006

    How are you testing the FTP connection?
    With IE, via a the CLI or via a third party tool?


    sandy2810
    Member
    #237821

    Re: Unable to access FTP site in ISA2006

    We tried it with IE, tried it through explorer and also via command prompt, none of these worked. Microsoft has suggested us to use two nic scenario instead of a single nic. We will try that and then check.


    Dumber
    Member
    #198882

    Re: Unable to access FTP site in ISA2006

    Hmmm so Microsoft is actually saying that it can’t work in single nic environment?
    Can you try using a third party app and by using PASV FTP?


    sandy2810
    Member
    #237822

    Re: Unable to access FTP site in ISA2006

    Guys finally we got our ftp issue sorted out courtesy Microsoft Technical support. This is what they suggested us to do.

    “I would like you to set “NonPassiveFTPTransfer” value to 1 under HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/W3Proxy/Parameters/ then restart Microsoft Firewall Service and do the test again and let me know”

    Thank you all for your effort.

Viewing 12 posts - 1 through 12 (of 12 total)

You must be logged in to reply to this topic.