Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

FTP Sites - Authorization required

Hi,

I'm having a few issues with allowing FTP sites for normal users.

When the FTP site requires a username and password, the Astaro blocked the site stating that "Authorization required".

I have allowed the FTP service in here - 
Web Security -> HTTP/S -> Advanced -> Misc Settings -> Allowed Target Services

I also have found an Astaro KB article describing my problem
https://support.astaro.com/support/index.php/Enter_FTP_Site_Password_in_IE_via_HTTP-Proxy

This seems to suggest that you have to change the URL inorder for Astaro to understand the request. I hope you can appreciate that normal users won't understand what they need to do and I was hoping there is a setting to allow the username and password prompt to appear when you just hit the ftp://ftpsite.com

Please let me know if this is possible or a suitable alternative to make it as easy as possible for users to access their ftp sites.

Thanks in advance!

Jonny


This thread was automatically locked due to age.
  • Use Mozilla Firefox as an alternative.
  • Hi suzzyx,

    Good suggestion but 500 installations of firefox would be even more of an administrative nightmare. haha

    Jonny
  • do you have the FTP proxy enabled?

    does it work with an ftp client?

    frirefrox is not an enterprise bowser...
  • Hi Kingbuzzo,

    Yes I believe I have FTP enabled correctly. FTP sites that require no password work ok... (ftp://ftp.astaro.com)

    It just doesn't seem to like ftp sites that are secured with a username and password.

    How exactly do you enable the FTP proxy?

    Thanks
  • I don't think this is related to Astaro.  This is a client issue, and, AFAIK, IE doesn't allow for this capability.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi Bob,

    If I put my machine out to the internet and bypass the Astaro device then FTP sites work ok. My IE seems to understand to prompt me for a username and password.

    Also the fact that ftp sites without a username and password work without any issues suggests to me that it has to be the Astaro that is blocking this username and password prompt.

    It seems like a simple piece of functionality, thought I had missed something in the Astaro configuration.

    I will continue to monitor and report back if something changes.

    Thanks for the reply..

    Jonny
  • Hi Bob,

    If I open the ftp site in windows explorer it prompts me for the username and password. Let me in and works fine - thats after the Authorization message.
    I did a firmware update to version 7.505, Maybe this has changed something as when I did this before the IE just froze.Could have just been that it needed a reboot??

    Anyway - I think this is an acceptable solution...

    Thanks for all the post's!!!

    Jonny
  • Hi,

    I also wasn't able to find any other way to have it work other than what was mentioned in the kb article. I instructed my users to use the suggested format, username[:P]assword@ftpsite.com Couldn't really switch to firefox, etc since we control our network via Windows Domain GPO's.

    Julio
  • there are 2 solutions:
    1. use the syntax as above (ftp://username[:P]assword@ftpurl)
    2. use windows explorer instead of internet explorer (somehow the windows explorer prompts for username / password.. must be a IE bug)
  • I would like to revive this issue, as it just bit me.

    A vendor provider a download URL of the form ftp: // username : password @ hostname/path/filename.  (Spaces added to prevent this from becoming a hyperlink.)

    Both Standard Mode and Transparent Mode proxies seem to strip the credentials.

    • Using Standard Mode Web, the connection fails with an "Authentication Required" error messages.
    • Using Transparent Mode FTP, times out or downloads a zero length file.  At least one time, Chrome prompted for basic-mode credentials, but the download still failed.

    Log files were nearly useless, because web filter reported everything as passed, until I noticed that the logged URL had the credentials were stripped.

    Eventually, I was able to download the file using an FTP client.

    I have some other downloads that are failing, and I am having a hard time understanding why, because they are managed by product-specific software update managers, and my logs (web, ftp, firewall) have not been unhelpful.

    Would it have been possible to make this work in a browser?

    Does anyone have any advice for detecting when a problem of this sort is occurring?

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?