Passive FTP on ISA Server 2000

I cannot connect to ftp server that uses passive mode, here is the error
message:

ISA Server: extended error message :
200 Switching to Binary mode.
200 PORT command successful. Consider using PASV.
425 Failed to establish connection.

Desktops (Windows Nt Workstation 4.0 SP6 and Windows XP Professional SP1)
are configured as web proxy client, and some are using Firewall Client
(users who uses protocol other than Web browsing). ISA 2000 SP2 FP1 was
configured HTTP redirector to Reject HTTP request from Firewall and
SecureNAT.

I have followed the instruction on
http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html
to create a protocol rule with secondary connections, and applied on
Protocol Rule but still same error occur. I have notice also that on Web
Proxy client settings that discussed on the article on isaserver.org is only
applicable to Windows 2000 and up, NT workstation doesn't have these IE
options (Use Passive FTP...). Please help me, I bandly needed this to be
activated.

Btw, you can try visiting this website that uses passive ftp to download
documents (http://www.bir.gov.ph). Select any documents with hyperlinked to
ftp://ftp.bir.gov.ph to check if your setting will work.

Hoping for your response.

regards,

Mark
.

Relevant Pages

  • Re: Passive FTP on ISA Server 2000
    ... >I cannot connect to ftp server that uses passive mode, ... > ISA Server: extended error message: ... > are configured as web proxy client, and some are using Firewall Client ...
    (microsoft.public.isa)
  • Passive FTP on ISA Server 2000
    ... I cannot connect to ftp server that uses passive mode, ... ISA Server: extended error message: ... Proxy client settings that discussed on the article on isaserver.org is only ...
    (microsoft.public.isa.configuration)
  • Passive FTP on ISA Server 2000
    ... I cannot connect to ftp server that uses passive mode, ... ISA Server: extended error message: ... Proxy client settings that discussed on the article on isaserver.org is only ...
    (microsoft.public.isa.clients)
  • Re: Support for passive FTP
    ... > I'd like to support passive mode FTP connections to my VMS FTP server, ... > the security risk by opening only those ports which the FTP server might ... Which VMS and TCPIP versions? ... At least VMS 7.3 with TCPIP services 5.3 can do passive mode. ...
    (comp.os.vms)
Quantcast