Not able to connect Azure - Web App using FTP

anil kumar 0

I am facing an issue while connecting Azure - Web App using FTP for file transfer. This was working fine earlier (a month ago) for me. The only thing I performed recently on the existing web app was the migration of the App service environment from v2 to v3 (which of course changed the IP address of the ASE v3 during migration).

I tried all the settings described @ https://learn.microsoft.com/en-us/answers/questions/1644291/not-able-to-connect-azure-web-app-using-ftp?page=1&orderby=Helpful, but no success so far.

Any ideas, or workarounds are welcome.

Luis Fernando Ramírez Viejo 0 Reputation points

2024-04-09T06:11:15.3133333+00:00

Did you check the firewall configuration and/or the passive mode?
anil kumar 0 Reputation points

2024-04-10T07:18:10.26+00:00

one more thing i have one more web app to which I can successfully connect for ftp. Also, i can ping virtual IP address mentioned for this web app.

But I cannot ping the virtual IP address for the web app having issue while connecting for ftp. I think it should.

Please correct if I am wrong.
SnehaAgrawal-MSFT 18,366 Reputation points

2024-04-12T11:01:13.5566667+00:00
@anil kumar Thanks for reaching here! Have you enabled FTP settings for ASE v3?

This ftpEnabled setting allows you to allow or deny FTP connections are the App Service Environment level. Individual apps will still need to configure FTP access. If you enable FTP at the App Service Environment level, you may want to enforce FTPS at the individual app level. The setting is default disabled.

If you want to enable FTP access, you can run the following Azure CLI command:

ASE_NAME="[myAseName]" RESOURCE_GROUP_NAME="[myResourceGroup]" az appservice ase update --name $ASE_NAME -g $RESOURCE_GROUP_NAME --allow-incoming-ftp-connections true az appservice ase list-addresses -n --name $ASE_NAME -g $RESOURCE_GROUP_NAME --query ftpEnabled

The setting is also available for configuration through Azure portal at the App Service Environment configuration:

In addition to enabling access, you need to ensure that you have configured DNS if you are using ILB App Service Environment and that the necessary ports are unblocked.

Let us know.
anil kumar 0 Reputation points

2024-04-15T06:23:08.4+00:00

@SnehaAgrawal-MSFT thanks for your reply.

[1]. first, I enabled FTP settings at the ASE level v3.

[2]. then, I enforced FTPS only with TLS version 1.2 at the individual App level.

So, far no luck while connecting to FTP (via winscp).

Let me cross-check the DNS configuration.
SnehaAgrawal-MSFT 18,366 Reputation points

2024-04-22T12:46:03.0966667+00:00

@anil kumar Just checking in if you have checked and have configured DNS if you are using ILB App Service Environment and that the necessary ports are unblocked. Let us know.
anil kumar 0 Reputation points

2024-04-23T05:46:54.5366667+00:00

@SnehaAgrawal-MSFT can you pls let me know how to confirm if I am using an ILB ASE?

BTW, I do see Inbound addresses and Outbound addresses mentioned in the web app Networking section and both addresses have changed during ASE migration from v2->v3 for this web App. After this migration, i am having issue while connection via FTP.
SnehaAgrawal-MSFT 18,366 Reputation points

2024-04-23T14:21:28.7533333+00:00

@anil kumar Could you share the error you're getting? A timeout or something else? An error would be helpful to better isolate the problem since it could be a DNS resolution problem.
anil kumar 0 Reputation points

2024-04-23T17:23:44.97+00:00

This is the error, does that help
SnehaAgrawal-MSFT 18,366 Reputation points

2024-04-24T16:33:50.1033333+00:00

@anil kumar Reached you privately.