Blocking FTP Downloads with an Access Rule
Novell Cool Solutions: Tip
By Caterina Luppi
Digg This -
Posted: 15 Mar 2002
If you are having trouble making an access rule that will effectively block FTP downloads through the browser, here are some troubleshooting tips:
Adding a packet filter exception for PORT FTP doesn't affect the download of FTP through the browser. The FTP download through the browser usually uses FTP tunnelled over HTTP, not native FTP.
There are a few things to check to make sure that the access rules can work as designed:
- Make sure that access rules are enforced.
- Make sure that there is proxy authentication enabled and that "authenticate only when user attempts to access restricted pages" is NOT checked.
- Make sure that the field for the FTP proxy is selected and configured in the browser.
- If the browser is IE, make sure that in Internet Options > Advanced, the checkbox "Enable folder view for FTP sites" is NOT checked. If this checkbox is checked, the browser will behave like an FTP application, and use native FTP.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com