FIX: An Active FTP data channel cannot be established for an internal computer that is running Forefront Threat Management Gateway Client

Article translations Article translations
Article ID: 2620156 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

Consider the following scenario:
  • You deploy Microsoft Forefront Threat Management Gateway 2010 as an Edge Firewall network topology.
  • You create an access rule that enables FTP connections from the internal network to the external network.
  • You configure the FTP application filter properties to enable active FTP access.
  • From an internal client computer that uses the Microsoft Forefront Threat Management Gateway Client, you try to access an FTP server that is located on the external network. This FTP server is configured to do FTP Active connections. This means that the FTP data channel will be established from the FTP Server to the FTP client.

In this scenario, you notice that the Active FTP data channel cannot be established. For example, you cannot retrieve directory content when you send the LIST FTP command.

Note This problem does not occur if the client computer uses secure network address translation (SecureNAT) instead of Forefront Threat Management Gateway Client or if Passive FTP is used instead of Active FTP.

RESOLUTION

To resolve this problem, install the hotfix rollup that is described in the following Microsoft Knowledge Base article:
2616324 A hotfix rollup is available for Forefront Threat Management Gateway Client

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

REFERENCES

For more information about Firewall client computers, visit the following Microsoft TechNet website:
About firewall client computers
For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Properties

Article ID: 2620156 - Last Review: October 1, 2011 - Revision: 1.0
APPLIES TO
  • Microsoft Forefront Threat Management Gateway 2010 Enterprise
  • Microsoft Forefront Threat Management Gateway 2010 Standard
Keywords: 
kbfix kbbug kbexpertiseinter kbsurveynew KB2620156

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com