We have recently installed ISA2004 and our database support peops need to transfer data from their web server to our database; they log onto our server, FTP to their webserver and transfer files in both directions. However we cannot make this work with ISA! We’ve tried setting up an access rule with ports 20 and 21 enabled, specifying their webserver IP address but I am loathe to open up too much as it defeats the object of the firewall. Any ideas? Can FTP be secured properly (I know SFTP won’t work with ISA) or is it better to find another mechanism for file transfer, if so what would you recommend?