Link to home
Start Free TrialLog in
Avatar of crp0499
crp0499Flag for United States of America

asked on

ISA 2004 & FTP

We have an ISA 2004 box running on top of Server 2003 Enterprise controlling traffic at our high school.  The church side of the organization needs to send the pastor's sermons to an FTP site so it can be put on the WEB for streaming.

We cannot write to the FTP site and receive the following error message.

Details:
200 Type set to I.
200 PORT command successful
550 Access Denied

Now, I know what your' gonna say...it's a permission issue, but the FTP worked fine before ISA and only stopped working after ISA.  Our host tells us the FTP site is dedicated to us and it has remained static for the last year that we've been uploading sermons there.

The first thing we did was turn off passive mode under IE and that made no difference.

So the host tells us to open ports 1024 thru 6553 on our ISA FTP rule, which we did, but that made no difference.  We tested two other FTP sites (sites we control) and received the same error.  Off site, we can access the FTP site fine but our off site test bed is not behind an ISA box.

We created a rule, just to test, and set it to rule #1, and opened up ALL FTP traffic on ALL ports and got nothing.

I would go back to my host and tell them it's their issue, but I can't write to any other FTP sites that I know work.

Any ideas?

Thanks

Cliff
ASKER CERTIFIED SOLUTION
Avatar of Keith Alabaster
Keith Alabaster
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
PS. Once you have it working again, close all those additional ports you have opened as they are not necessary; just a security risk. ISA operates by opening dynamically the secondary ports using the high-port number stipulated by the ftp server you are contacting.

Regards

keith
ISA MCT
Avatar of crp0499

ASKER

It's problems like this...no, it's SOLUTIONS like this, that make me think I should have been a mortician!

We spent 40 minutes on this one yesterday and the solution was so simple.

Thanks Keith.

No problem and you are very welcome.

regards
Keith