Re: Is this happening to you?

Thanks, Jacob,

This laptop is a company asset, and has been in my personal possession since purchase (several years ago).
This whole thing is strange. I confess I haven't needed ftp for a while but having to configure the firewall for it was never necessary before.


Best Regards,

Thomas Garvey


On 3/5/2021 1:43 PM, Jacob Banda wrote:

Thomas,


Depending on how your networking team has the VPN tunnel set up, you may or
may not have all your traffic flowing through the tunnel. If a split-tunnel
is set up, then only traffic destined for your internal resources would get
routed through the VPN tunnel. All the rest of your "normal" non-work
traffic would not pass through the VPN tunnel and would instead flow through
your ISP gateway like any normal traffic.


That being said, the problem was with your Windows Firewall.


Still, the fact that you had to toggle the Windows Firewall Rule to allow
ftp to work is strange. Usually the Windows Firewalls allow ALL outbound
traffic, and the rules are only restrictive on INBOUND connections. It
sounds to me like your Windows Network Profile (Domain, Private, or Public)
has been set to a mode where either OUTBOUND traffic is only allowed via
whitelisted rules, or you had an explicit DENY rule for outbound FTP
traffic. In any case, normal default Windows Firewall Rules would not have
restricted outbound FTP traffic. Is that machine your using a personal
machine, or a company asset? If it was ever a part of an enterprise domain,
perhaps a GPO was applied to that machine which restricted OUTBOUND traffic
rules. Or perhaps you've made those changes yourself in the past.


-----------------------------------------
Jacob Banda
-----------------------------------------



-----Original Message-----

date: Fri, 5 Mar 2021 13:10:45 -0600

from: Thomas Garvey <tgarvey@xxxxxxxxxx <mailto:tgarvey@xxxxxxxxxx> >

subject: Re: Is this happening to you?


Ok, it wasn't the Xfinity Advanced Security product. Disabling it had no
effect (ftp still failed).

I opened up Windows Defender Firewall and found that the apps allowed did
not include file transfer.


I enabled it and ftp worked. (did expiration and removal of Norton
Anti-virus disable them? I don't know)


But now Rob Berendt's question has me thinking... what difference does that
make when I am connecting to a server through a vpn?

I'm speaking out of ignorance here, but wouldn't everything going out to the
internet have to go through the vpn tunnel?


Best Regards,


Thomas Garvey

Corporate Scientist