[c-nsp] Problems downloading from ftp.cisco.com

[Adrian Minta]

On 04/23/10 16:45, Geert Nijs wrote:
> Hello all,
>
> A customer of us has a really strange problem. He can't download anything
> from ftp.cisco.com
> He is sitting behind a Checkpoint Firewall. The Firewall admin says that
> everything is configured correctly (we can download from other FTP sites).
> I don't even get to the user login prompt ! We only get half a header at
> Cisco:
>    
It is a common problem with CP firewalls. The solution is to disable 
"smart defense" for FTP, because is not "smart" at all.
The condition is triggered by the message sended by the ftp server after 
entering into a directory. The message usually exceed CP "smart" limit.

-- 
Best regards,
Adrian Minta