• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 255
  • Last Modified:

Can't access external FTP sites using ISA 2004.

Dear all,

A customer is running 2 different ISA servers. Each ISA is dedicated to a different ISP.

1. ISA 2000 that allows some specific users to access everything. Doesn't filter any thing. traffic pass through Cisco pix firewall. users can access external FTP sites. that verifies that FTP traffic (port 20 and 21 ) is allowed from pix firewall.

2. MS ISA 2004 Standard edition with SP3 from here users can access HTTP,HTTPs but can't access external FTP sites. some ISA clients are web proxy and firewall. initially users can access ftp sites ie, ftp://ftp.symentic.com now if a user try this IE returns following error.

Windows cannot access this folder. Make sure you typed the file name correctly and that you have permission to access the folder.
Details
The server name or address could not be resolved

on isa 2004 a rule is made that allows external ftp traffic.

what could be the problem?

any suggestion would highly be appreciated!
0
Arabsoft
Asked:
Arabsoft
  • 2
1 Solution
 
Alan Huseyin KayahanCommented:
Hi Arabsoft,

          What is the problem you encounter at the moment? You can not update symantec? Please do the following that I experienced in past and recognized the issue while monitoring syslogs
                no fixup protocol dns maximum-length 512
                 If DNS length is a must, then increase it to at least 600, you can see which DNS length does the request for ftp.symantec.com have if you check syslogs (i.e , length 566 discarded)

Regards,

MrHusy
0
 
ArabsoftAuthor Commented:
dear,

i quoted the example there as ftp://ftp.symentic.com.
actually, users can not access any external ftp site. for example.
ftp://ftp.hp.com, ftp.cisco.com

any other suggestion?
0
 
Alan Huseyin KayahanCommented:
      Hi Arabsoft
            The issue I mentioned above may affect other ftp sites.
            You better post here the part of syslogs at the time of browsing an ftp site, so that we can see if it is PIX related or not.

Regards
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now