Solved

CISCO ASA 5520, FTP Timeouts

Posted on 2013-12-16
9
739 Views
Last Modified: 2013-12-17
We have recently moved to an ASA 5520 and finding that our FTP connections are timing out when downloading large files.

I can use the ASDM and the CLI but cannot find anything definitive to increase the time out for FTP connections...

Any help is much appreciated!

Thanks
BF
0
Comment
Question by:bigfooter
9 Comments
 
LVL 6

Expert Comment

by:Ramakrishna Prabhu
ID: 39721928
What policies have been enabled currently? Can you paste the configuration?
0
 

Author Comment

by:bigfooter
ID: 39721945
Hi

policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny  
  inspect sunrpc
  inspect xdmcp
  inspect sip  
  inspect netbios
  inspect tftp
  inspect ip-options
!
service-policy global_policy global
prompt hostname context
call-home reporting anonymous

: end
0
 
LVL 12

Accepted Solution

by:
Henk van Achterberg earned 500 total points
ID: 39722669
can you lower the MTU to 1300 (just to test) on the WAN interface?
0
 

Author Comment

by:bigfooter
ID: 39722711
On the external interface? Will this not clip the bandwidth? We have 400 users on a 1Gig line
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 57

Expert Comment

by:Pete Long
ID: 39723286
>> Will this not clip the bandwidth?

NO, it only affects packet fragmentation

PL
0
 

Author Comment

by:bigfooter
ID: 39723420
Ok thanks

mtu management 1500
mtu Inside 1500
mtu Outside 1300

All done. how does this affect timeouts for FTP? Cheers
0
 

Author Closing Comment

by:bigfooter
ID: 39723603
Thanks
0
 
LVL 12

Expert Comment

by:Henk van Achterberg
ID: 39723610
if there is a router between your ASA and the FTP server that drops packets with a large packet size then this behaviour occurs.

You can test with higher MTU values like 1400, 1410, etc. so see which value works without problems.

I suggest you look for the highest possible value.
0
 

Author Comment

by:bigfooter
ID: 39723615
Thanks I will tweak until I hit the sweet spot.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now