Link to home
Start Free TrialLog in
Avatar of sctowne
sctowne

asked on

How to open active ftp on a cisco asa

I have a user that needs to access an active ftp (as opposed to passive) server from inside an cisco asa ver 8.2(2) firewall.

The firewall is somehow blocking her access from the inside out to the active ftp server. I cant seem to find the proper documentation to allow this.
ASKER CERTIFIED SOLUTION
Avatar of John Meggers
John Meggers
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sctowne
sctowne

ASKER

Hi jmeggers, I have looked at the document but, its purpose is if you want to set up an FTP server on a DMZ. I am not trying to set one up, but only communicate with an existing one on the internet.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sctowne

ASKER

Thanks to all, the solution had to do with the Protocol inspection and service policy rules. I cleared what was there and added the following line to the Cisco ASA:
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map asa_global_fw_policy
 class inspection_default
 inspect ftp
!
service-policy asa_global_fw_policy global