"Gil, Ruben" wrote:
>
>         We want to ftp over ssl on port 21, but we can�t do it, FW-1
> stops the connection.

FW-1 wants to proxy the FTP session. If it is SSL encrypted, it cannot.
I _presume_ FW-1 is therefore blocking things. You may want to turn off
FTP proxying and make sure your not trying to use an FTP resource rule.

Note that even if FW-1 does not actively block the control connection
(which I'm not really sure it is), SSL tunneled FTP still may not work
if it needs to make new TCP data connections. The firewall cannot read
the control connection to open up the appropriate ports. What type of
FTP clients and servers are you using for this and what standard, if
any, do they use for SSL-FTP?
--
Crist J. Clark                               [EMAIL PROTECTED]
Globalstar Communications                                (408) 933-4387

The information contained in this e-mail message is confidential,
intended only for the use of the individual or entity named above.
If the reader of this e-mail is not the intended recipient, or the
employee or agent responsible to deliver it to the intended recipient,
you are hereby notified that any review, dissemination, distribution or
copying of this communication is strictly prohibited.  If you have
received this e-mail in error, please contact [EMAIL PROTECTED]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to