Ports required from DMZ to Internal for File Server (FTP)

Hello,
We are implementing an FTP server in a DMZ, managed by a Cisco ASA. The server is a member server of the domain. I would like to know what ports need to be opened on the ASA so that users in the internal network can map a drive to the shared FTP root folder. Can anyone please help? Thanks in advance.
ddnsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

2PiFLCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ddnsAuthor Commented:
Thanks for your quick answer and link. But what about LDAP and other ports? Won't these need to be open due to the fact the server is participating in a domain? Thanks again...
0
rehanahmedsCommented:
you can try opening the ports one by one cause i m sure you dont want any extra ports opened...

LDAP use TCP port 389 for client communications and TCP port 636 for secure client communication ( SSL )

if you are using exchange on the same server you may find an error or you wont cause they both work on same port..
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

batry_boyCommented:
Here's the answer from Microsoft:

http://support.microsoft.com/kb/179442
0
rehanahmedsCommented:
oh its a member server then you wont need to open LDAP ports... sorry for last port...
0
rehanahmedsCommented:
TCP port 389 for client communications
TCP port 636 for SSL communications
TCP port 3268 for communications to Global Catalog server
TCP port 3269 for SSL communications to Global Catalog server
0
rehanahmedsCommented:
yeh dont open LDAP ports its member server just open the ports for FTP
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking Protocols

From novice to tech pro — start learning today.