I've configured an IPSec VPN on an ASA 5505 with the mind that all traffic (besides http/s) has to go through this VPN to access the server.

I have also allowed tcp/3389 to pass through the VPN and in doing this, I can connect to using Window's remote desktop client.

When I configure tcp/ftp and tcp/ftp-data in the same way, I'm still unable to connect to with FileZilla.

Are there any special steps I need to take to configure FTP?

NOTE: I'm using ASDM

  • You should accept your answer so tht the question doesn't keep popping up, looking for an answer, forever.
    – Ron Maupin
    Oct 31, 2015 at 18:38

1 Answer 1


It turns out the ASA was configured correctly.

I used the packet trace tool to determine where it was falling over. It's some quirk in IIS. FileZilla Server worked fine though once it was configured for passive mode.

  • If you're doing any sort of NAT/PAT on that VPN traffic, you'll need "inspect ftp" to deal with the ip address or port changes as they pass through the ASA. Jul 4, 2015 at 8:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.