Hello Johan, My guess would be, we are instructing the ASA to look into the traffic going to port 21021 for FTP commands. So i think the ASA assumes the traffic is FTP and looks for the PASV and PORT ftp commands. Once it finds that, it goes about doing it's normal FTP inspection.
Atleast that's my theory :) Cheers, TacACK
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
