We have installed a WSFTP (V 3.1) Server, on a Windows 2000 Server, for the purpose of running SFTP for receipt of customer files. The server was placed on our DMZ (Cisco 515E Pix). Access is via the internet to a public address with a NAT to a private address on the DMZ. The error we receive is “425 Can’t connect to connection”. The basic problem is that connectivity to the FTP Server supporting SSL across a NAT’d public address doesn’t work well or not at all. Now looking at the WSFTP supportdocuments you gather this is a known problem and their programming staff doesn’t have a fix. Of course we purchased the product w/o doing any research. Since we exclusively use the WSFTP Client we felt it would be a good fit.
As a possible solution we are considering placing the server on another public address, add a second DMZ Card to the pix,and use a static address. Of course, doing so opens up a security hole. We could place the server outside the firewall.
Perhaps someone has encountered this exact issue.
Any recommendations/solutions would be appreciated.
Thanks!