Windows Server - The specified Secure Sockets Layer (SSL) port is not allowed.

Asked By Paul

22-Oct-09 04:15 AM

Hi,

We have ISA 2006 on a windows 2003 environment. When trying to FTP using IE
we get "this page is read only due to proxy configuration", however read
only is unticked on the FTP protocol.

If I use filezilla for logging purposes it attempts to connect then says
not configured to allow SSL requests from this port. Most Web browsers use
port 443 for SSL requests"

ISA logging shows a failure on SSL Tunnel, which when looking at the KB
article http://support.microsoft.com/default.aspx?scid=kb;en-us;283284 which
has scripts for ISA 2004 suggests I need to add port 21 to the range of SSL
ports?

Is there a similar script or fix for 2006?

If I use IE to ftp it fails on FTP protocol, yet, at all points (I think)
I have allowed FTP upload by unticking read only on our main access rule and
also on a new ftp rule I made and put as a higher priority for testing.

Any help is greatly appreciated.

Thanks

22-Oct-09 09:47 AM

Do not multi-post (identical but separate message in multiple groups).
If it needs to be in more than one groups then cross post (Same message send
to multiple destiantion groups).
But it does not need to be in multiple groups because it is all the same
people in most all of them related groups,...so we will see it with there
only being one.

I answered this in the other groups you posted in.

There is no SSL here.  It is just FTP

Open FileZilla
Edit Menu --> Settings
FTP Proxy = none
Generic Proxy = none

Open Site Manager (First icon on Toolbar)
Delete the entry for the site you are working with
Exit the Site Manager

Back at the main screen
Enter the IP of the FTP server in the Host box
Enter the username and password in the corresponding boxes
Leave the port box blank
Click the Quickconnect Button

If this fails do all your testing using the Commandline FTP built into
Windows.  When it works,..ISA is fine.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

26-Oct-09 08:50 AM

Thanks

The problem was down to a hardware firewall beyond the ISA server, we
allowed FTP traffic on that and all is functioning now.