Port 990 FTPS , on cisco ASA firewall

I have a Cisco ASA5520 firewall.

I have installed a FTPS server on a webserver and want to connect to it from within our network.

What is the command to allow everyone inside our network to connect to only this webserver via port 990

Have i got the correct command:

access-list inside_access_in extended permit tcp any host (WEB IP ADDRESS) eq 990


thanks

vconstantinouAsked:
Who is Participating?
 
egyptcoConnect With a Mentor Commented:
citation from cisco FAQ:

Q. Is FTP with TLS/SSL supported through the Security Appliance?

    A. No. In a typical FTP connection, either the client or the server must tell the other what port to use for data transfer. The PIX is able to inspect this conversation and open that port. However, with FTP with TLS/SSL, this conversation is encrypted and the PIX is unable to determine what ports to open. Thus, the FTP with TLS/SSL connection ultimately fails.

    One possible workaround in this situation is to use an FTP client that supports the use of a "clear comannd channel" while still using TLS/SSL to encrypt the data channel. With this option enabled, the PIX should be able to determine what port needs to be opened.
0
 
willbaclimonCommented:
Also ftps usually needs return port ranges specified aswell
0
 
nguovnCommented:
Can you show me the command to do "clear data channel" for ftps
Thanks,
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.