Your best friend for file transfer.

Fetch application logoFetch

Unable to use Fetch without logging into Windows (7 posts)

  • Started 7 years ago by Lewej
  • Latest reply 7 years ago from Scott McGuire
  • Lewej Member

    Hi

    We have some apple Mac's that work using a FTP application called Fetch -
    provided they are logged onto the domain.

    We had some profile issues with one user, and he just logs onto his local
    machine and not the domain. (We got the Mac equivelent of BSOD if he logs
    onto domain.)Herein lies my problem.

    I can get the Mac proxy and Firefox all setup OK by applying username and
    password for our ISA 2004 server in the apps or OS. However the Fetch ftp
    program I just cannot get to work!! ISA 2004 tells me it is blocked on the
    default rule.

    The vendors of Fetch tell me it should work without any additinal settings
    for ISA 2004.

    BUT can anyone tell me how to allow this ftp application through our
    firewall for some-one not logged onto our domain? The computer account exists
    in AD. All users are selecetd rather than jsut authenticated users. I have
    tried to make a specific ftp rul that allows the Mac IP address through, but
    it is still blocked by the default rule.

    Probably the most interesting error on the logs is this:
    tab 0xc004000d FWX_E_POLICY_RULES_DENIED

    Any help mcuh appreciated

    Thanks

    Lewej

    Posted 7 years ago #

  • Scott McGuire Administrator

    Hi,

    Could you please confirm that the following settings are set in Fetch on the user's machine?

    * In the General pane of Fetch Preferences, the "Use passive mode transfers" checkbox is checked.
    * In the Proxy pane of Fetch Preferences, Proxy type is set to "None."

    With those settings, can the Fetch users connect to ftp.fetchsoftworks.com (leave the username and password fields blank)?

    Thanks,

    Scott McGuire
    Fetch Softworks

    Posted 7 years ago #

  • Lewej Member

    Hi Scott

    Yes, I have tried both suggestions (I did poke about the newsgroup a little.) Neither of which seem to work.

    I know it would work if we were actually logging the user into AD, but they log onto the local amchine only.

    Hence I am sure it should ahve some sort of authentication tow ork with ISA. Firefox has it's own proxy setting and works OK.

    I looked at the log and it does not really igve much useful information.

    TIA

    Lewej

    Posted 7 years ago #

  • Scott McGuire Administrator

    Hi,

    Thanks for the confirmation.

    Unfortunately, I'm afraid I'm not familiar enough with Windows and ISA 2004 servers to tell you what needs to be done. You may need the assistance of an ISA 2004 expert to figure this one out.

    However, I did some research on the web, and it seems that FTP access to ISA 2004 servers is often problematical, regardless of the client you use.

    The most concise suggestion that sounded likely to be helpful that I found was "ISA server supports any FTP client. Just make sure the Mac is configured as a SecureNAT client and that the FTP application filter is enabled on ISA server." I am not sure if that informtion is valid or relevant to your situation, though.

    Here are links to some other pages I found that looked like they might be helpful in finding a solution, although most refer to ISA 2000 instead of ISA 2004.

    http://www.microsoft.com/technet/prodtechnol/isa/2000/maintain/isaftpci.mspx

    http://support.microsoft.com/default.aspx?scid=kb;en-us;300641

    http://www.isaserver.org/articles/How_the_FTP_protocol_Challenges_Firewall_Security.html

    I hope this helps some, or that perhaps someone else reading the message boards has a suggestion for you.

    Sorry we cannot be of more assistance,

    Scott McGuire
    Fetch Softworks

    Posted 7 years ago #

  • Lewej Member

    Hi - and thanks for your help. After further investigation I think you are right and it is all done to how I have to change ISA 2004. I'll post back if I find anything useful.
    Cheers
    Lewej

    Posted 7 years ago #

  • Lewej Member

    Hi Scott

    Ah - I have found the issue - and it was as you pointed out earlier in the thread. I omitted to make the machine a secureNAT client!!!

    Once done it gallops away without issue

    Thanks

    Lewej

    Posted 7 years ago #

  • Scott McGuire Administrator

    Hi Lewej,

    Glad to hear my suggestions were useful and great to hear it's working now! Thanks for the followup.

    Best,

    Scott McGuire
    Fetch Softworks

    Posted 7 years ago #

Reply

  • Or nickname, if you prefer.
  • This will be kept confidential.
  • This is to ensure that you’re a person, not a spambot.