RE: Can't access FTP sites requiring authentication

Hello CozmiqMan,

Thank you for kind update.

Based on my further research, I think this is an issue relate to the ISA
client settings.

Method 1: Disable FTP web proxy on IE7:

1. Please open client IE Internet Options->Connections tap->LAN settings
button->Advanced button

2. Do not tick the option: Use the same proxy server for all protocols

3. Leave blank in the FTP line.

4. Click OK to finish

5. Ensure the client computer's default gateway pointing to ISA internal
interface.

6. Then, test this issue.

Method 2: Install ISA firewall client application on the problematic
computer

1. On the client computer, access \\SBSname\mspclnt\, and run setup.exe to
install ISA 2004 firewall client.

2. Double click the ISA firewall client icon in the taskbar, click Web
Browser tap, clear the option "Enable Web browser automatic configuration",
click OK

3. Test this issue.

If we can not resolve the issue after we perform the above steps, please
kindly help me collect the information I ask for in my previous reply for
further investigation:

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Can't access FTP sites requiring authentication
| thread-index: AceYlC5c9Z3LvTp+SQi168nUZ8nYjA==
| X-WBNR-Posting-Host: 207.46.19.197
| From: =?Utf-8?B?Q296bWlxTWFu?= <CozmiqMan@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1A861182-03AE-4DC6-AE89-91021647E7D8@xxxxxxxxxxxxx>
<iduHli4lHHA.4032@xxxxxxxxxxxxxxxxxxxxxx>
<E7EEACC7-275E-4491-8196-4AFEA4280B36@xxxxxxxxxxxxx>
<lGEc1cGmHHA.5432@xxxxxxxxxxxxxxxxxxxxxx>
<A1A0800A-DA18-4C94-ABEA-37B2F9519C82@xxxxxxxxxxxxx>
| Subject: RE: Can't access FTP sites requiring authentication
| Date: Thu, 17 May 2007 08:01:00 -0700
| Lines: 323
| Message-ID: <F53DD2DC-F68C-41F9-8F65-70EC0BA3A732@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:37438
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi Terence,
|
| I did not do your steps yet because I am not on site. However, I have
| retried the FTP site remotely using NOT Internet Explorer 7.0 but
Internet
| Explorer 6.0 and lo and behold, I get the authentication popup window
| requesting the username and password. Once entered, I am able to
| upload/download without fail. Therefore I believe the issue lies with
the
| browser's version and NOT the ISA 2004 since claerly I am not being
blocked.
| I have not yet tried with Firefox or Opera however.
|
| Unless you have another solution, I will perform your instructions once
I'm
| on site as requested but with this new information, I believe it will not
| make a difference.
|
| Thank you for your time.
|
| Regards,
| --
| CozmiqMan
|
|
| "CozmiqMan" wrote:
|
| > Hello Terence,
| > I did not get the chance to try your steps yet. I intend to do this
today.
| > I was only stating the fact that I had already tried beforehand the
| > 'ftp://user:pwd@xxxxxxxxxxxxxxx/' but it does not allow me to upload
anything.
| > I will definitely try your steps today. I will send you all required
logs
| > and post my results.
| > Thank you for your time.
| > --
| > CozmiqMan
| >
| >
| > "Terence Liu [MSFT]" wrote:
| >
| > > Hello CozmiqMan,
| > >
| > > Thank you for kind update.
| > >
| > > I'm glad to hear that you can upload file to the FTP site now.
| > >
| > > I am just writing to see whether there is anything further I can do
for
| > > you. If you have any concerns on this thread, please feel free to let
me
| > > know. I am glad to be of assistance. :-)
| > >
| > > Thank you and have a nice day,
| > >
| > > Best regards,
| > >
| > > Terence Liu(MSFT)
| > >
| > > Microsoft CSS Online Newsgroup Support
| > >
| > > Get Secure! - www.microsoft.com/security
| > >
| > > =====================================================
| > > This newsgroup only focuses on SBS technical issues. If you have
issues
| > > regarding other Microsoft products, you'd better post in the
corresponding
| > > newsgroups so that they can be resolved in an efficient and timely
manner.
| > > You can locate the newsgroup here:
| > > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > >
| > > When opening a new thread via the web interface, we recommend you
check the
| > > "Notify me of replies" box to receive e-mail notifications when there
are
| > > any updates in your thread. When responding to posts via your
newsreader,
| > > please "Reply to Group" so that others may learn and benefit from
your
| > > issue.
| > >
| > > Microsoft engineers can only focus on one issue per thread. Although
we
| > > provide other information for your reference, we recommend you post
| > > different incidents in different threads to keep the thread clean. In
doing
| > > so, it will ensure your issues are resolved in a timely manner.
| > >
| > > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > > check http://support.microsoft.com for regional support phone numbers.
| > >
| > > Any input or comments in this thread are highly appreciated.
| > > =====================================================
| > >
| > > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > >
| > > --------------------
| > > | Thread-Topic: Can't access FTP sites requiring authentication
| > > | thread-index: AceXseEA7BWrOkBsSdym8A9U75kuxw==
| > > | X-WBNR-Posting-Host: 207.46.193.207
| > > | From: =?Utf-8?B?Q296bWlxTWFu?= <CozmiqMan@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > > | References: <1A861182-03AE-4DC6-AE89-91021647E7D8@xxxxxxxxxxxxx>
| > > <iduHli4lHHA.4032@xxxxxxxxxxxxxxxxxxxxxx>
| > > | Subject: RE: Can't access FTP sites requiring authentication
| > > | Date: Wed, 16 May 2007 05:01:04 -0700
| > > | Lines: 213
| > > | Message-ID: <E7EEACC7-275E-4491-8196-4AFEA4280B36@xxxxxxxxxxxxx>
| > > | MIME-Version: 1.0
| > > | Content-Type: text/plain;
| > > | charset="Utf-8"
| > > | Content-Transfer-Encoding: 7bit
| > > | X-Newsreader: Microsoft CDO for Windows 2000
| > > | Content-Class: urn:content-classes:message
| > > | Importance: normal
| > > | Priority: normal
| > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > > | Newsgroups: microsoft.public.windows.server.sbs
| > > | Path: TK2MSFTNGHUB02.phx.gbl
| > > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:37080
| > > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > > |
| > > | Thank you Terence for your assistance.
| > > |
| > > | As previously stipulated, I have appended my username and password
to the
| > > | FTP site as you mentioned. However this allows me to see the site
but
| > > DOES
| > > | NOT allow me to post and/or upload any files whereas outside of our
LAN,
| > > we
| > > | get a popup to authenticate and we are then able to upload as
expected.
| > > |
| > > | Please advise. Thank you.
| > > |
| > > | --
| > > | CozmiqMan
| > > |
| > > |
| > > | "Terence Liu [MSFT]" wrote:
| > > |
| > > | > Hello CozmiqMan,
| > > | >
| > > | > Thank you for posting here. And thanks for Henry's inputs.
| > > | >
| > > | > According to your description, I understand that you get "502
proxy
| > > error"
| > > | > when you access the FTP site which requires authentication from
SBS or
| > > | > internal client. If I have misunderstood the problem, please
don't
| > > hesitate
| > > | > to let me know.
| > > | >
| > > | > Based on my research, this issue occurs if ISA Server does not
send the
| > > | > authentication information to the FTP server in the first
request. The
| > > FTP
| > > | > server closes the connection if the anonymous authentication
| > > information is
| > > | > not received in the first request. ISA Server usually sends the
| > > | > authentication information to an FTP site in the first request.
| > > | >
| > > | > To resolve this issue, log on to the FTP server by including a
user
| > > name
| > > | > and a password in the URL. Use the following format:
| > > | >
| > > | > ftp:// User_Name : Password @ FTP_Server
| > > | >
| > > | > There is a sample of the URL you need to enter in IE:
| > > | >
| > > | > ftp://abc:123@xxxxxxxxxxxxxxx (ABC is the username and 123 is the
| > > password)
| > > | >
| > > | > Note: When you follow these steps to log on to a secure FTP site,
the
| > > user
| > > | > name and the password may be displayed in plain text in the
Internet
| > > | > Explorer title bar or status bar.
| > > | >
| > > | > For more detail, please go through the following KB:
| > > | > Error message when a client computer tries to access an FTP site
| > > through
| > > | > ISA Server 2004: "Error Code: 502 Proxy Error"
| > > | > http://support.microsoft.com/?id=925880
| > > | >
| > > | > If we can not resolve the issue after we perform the above steps,
| > > please
| > > | > kindly help me collect some information for further investigation:
| > > | >
| > > | > 1. Test the FTP in different client mode. Open Internet Explorer,
click
| > > | > 'Tools'->'Internet Options'. In 'Advanced' tab, modify the
settings and
| > > | > then try the FTP access:
| > > | > a. Check 'Enable folder view for FTP site' option; uncheck 'Use
Passive
| > > | > FTP' option (The IE will work in Active mode FTP). Does the issue
| > > reoccur?
| > > | > b. Uncheck 'Enable folder view for FTP site' option; check 'Use
Passive
| > > | > FTP' option (The IE will work in Passive mode FTP). Does the
issue
| > > reoccur?
| > > | >
| > > | > 2. Please help to gather the ISA Info:
| > > | >
| > > | > 1) Download the file from the following URL:
| > > | >
| > > | > http://www.isatools.org/tools/isainfo.zip
| > > | >
| > > | > 2) Extract all files to a folder on ISA server.
| > > | >
| > > | > 3) Double click Isainfo.js. This will generate 2 files
| > > | > ISAInfo2004-<computer-name>.log and
ISAInfo2004-<computer-name>.xml in
| > > the
| > > | > current folder.
| > > | >
| > > | > 4) Please send these files to me at v-terliu@xxxxxxxxxxxxx
| > > | >
| > > | > 3. Please also help to gather the ISA logs:
| > > | >
| > > | > 1) Schedule a down time.
| > > | >
| > > | > 2) Open ISA 2004 management console.
| > > | >
| > > | > 3) Expand the server node and highlight 'Monitoring'.
| > > | >
| > > | > 4) In the right pane, switch to the 'Logging' tab, make sure the
'Task
| > > | > Pane' is showed there.
| > > | >
| > > | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
| > > 'Logging
| > > | > Tasks', and then switch the 'log storage format' from 'MSDE
database'
| > > | > (default) to 'File'.
| > > | >
| > > | > 6) Switch to the 'Fields' tab, click 'Select All', and then click
OK.
| > > | >
| > > | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
| > > 'Logging
| > > | > Tasks', and then switch the 'log storage format' from 'MSDE
database'
| > > | > (default) to 'File'.
| > > | >
| > > | > 8) Switch to the 'Fields' tab, click 'Select All', and then click
OK.
| > > | >
| > > | > 9) Click 'Apply' to save changes and update the configuration.
| > > | >
| > > | > 10) Temporarily disable the Firewall service. To do that, please
click
| > > | > Monitoring | Services tab, and then right click 'Microsoft
Firewall' to
| > > | > choose 'Stop'.
| > > | >
| > > | > 11) Clear the current existing W3C logs. To do that, go to the
log
| > > saving
| > > | > directory and clean any existing .W3C logs. By default, the logs
will
| > > be
| > > | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some
MDF may
| > > not
| > > | > be able to deleted, that's normal.) You may backup them first
and
| > > then
| > > | > delete them.
| > > | >
| > > | > 12) Go back to the ISA 2004 management console, and then Start
the
| > > stopped
| > > | > 'Microsoft Firewall' service.
| > > | >
| > > | > 13) Reproduce the problem, stop the service, and then gather the
| > > resulting
| > > | > W3C files to me for analysis.
| > > | >
| > > | > 14) Please also let me know the IP address of the testing clients
so
| > > that I
| > > | > can filter the data.
| > > | >
| > > | > Hope these steps will give you some help.
| > > | >
| > > | > Thanks and have a nice day!
| > > | >
| > > | > Best regards,
| > > | >
| > > | > Terence Liu(MSFT)
| > > | >
| > > | > Microsoft CSS Online Newsgroup Support
| > > | >
| > > | > Get Secure! - www.microsoft.com/security
| > > | >
| > > | > =====================================================
| > > | > This newsgroup only focuses on SBS technical issues. If you have
issues
| > > | > regarding other Microsoft products, you'd better post in the
| > > corresponding
| > > | > newsgroups so that they can be resolved in an efficient and
timely
| > > manner.
| > > | > You can locate the newsgroup here:
| > > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| > > | >
| > > | > When opening a new thread via the web interface, we recommend you
check
| > > the
| > > | > "Notify me of replies" box to receive e-mail notifications when
there
| > > are
| > > | > any updates in your thread. When responding to posts via your
| > > newsreader,
| > > | > please "Reply to Group" so that others may learn and benefit from
your
| > > | > issue.
| > > | >
| > > | > Microsoft engineers can only focus on one issue per thread.
Although we
| > > | > provide other information for your reference, we recommend you
post
| > > | > different incidents in different threads to keep the thread
clean. In
| > > doing
| > > | > so, it will ensure your issues are resolved in a timely manner.
| > > | >
| > > | > For urgent issues, you may want to contact Microsoft CSS
directly.
| > > Please
| > > | > check http://support.microsoft.com for regional support phone
numbers.
| > > | >
| > > | > Any input or comments in this thread are highly appreciated.
| > > | > =====================================================
| > > | >
| > > | > This posting is provided "AS IS" with no warranties, and confers
no
| > > rights.
| > > | >
| > > | > --------------------
| > > | > | Thread-Topic: Can't access FTP sites requiring authentication
| > > | > | thread-index: AceXOVCPEhZASOAjT2i7m8ZU6JgnEg==
| > > | > | X-WBNR-Posting-Host: 207.46.19.197
| > > | > | From: =?Utf-8?B?Q296bWlxTWFu?=
<CozmiqMan@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > > | > | Subject: Can't access FTP sites requiring authentication
| > > | > | Date: Tue, 15 May 2007 14:38:02 -0700
| > > | > | Lines: 25
| > > | > | Message-ID: <1A861182-03AE-4DC6-AE89-91021647E7D8@xxxxxxxxxxxxx>
| > > | > | MIME-Version: 1.0
| > > | > | Content-Type: text/plain;
| > > | > | charset="Utf-8"
| > > | > | Content-Transfer-Encoding: 7bit
| > > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > > | > | Content-Class: urn:content-classes:message
| > > | > | Importance: normal
| > > | > | Priority: normal
| > > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
| > > | > | Newsgroups: microsoft.public.windows.server.sbs
| > > | > | Path: TK2MSFTNGHUB02.phx.gbl
| > > | > | Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.sbs:36972
| > > | > | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| > > | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > > | > |
| > > | > | Hello,
| > > | > |
| > > | > | I am trying to access an FTP site that requires authentication.

| > > However
| > > | > I
|

.