topic Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled in Network Security

Can't add ASA in CSM 3.1.1 when WEBVPN enabled

ckuriyar74 — Fri, 21 Feb 2020 10:57:24 GMT

Hi Friends,

I have ASA5510 enabled with Web VPN access and when I try to add the ASA 5510 in Cisco security Manager 3.1.1 console it fails.

Can anyone help me to resolve this issue.

Thanks,

Chandru

Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled

Farrukh Haroon — Thu, 07 Aug 2008 13:16:55 GMT

Which version of the ASA?

I think they have some limitations there when it comes to SSL VPN, ASA 7.x with CSM 3.1.x and 8.x with 3.2.x only (Something like this).

Regards

Farrukh

Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled

ckuriyar74 — Fri, 08 Aug 2008 05:09:17 GMT

The ASA version is 8.0(3) and CSM software 3.1.1

Iam able to add these ASA boxes in RME but unable to import from DCR in cisco security manager.

It fails to add the device and i suspect could be the device is unable to contact via https because webvpn is used this port.

any possible solutions to resolve this issue?

Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled

Farrukh Haroon — Fri, 08 Aug 2008 06:29:32 GMT

You can change ports for both ASDM and WEbVPN, have a look at:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807be2a1.shtml

Regards

Farrukh

Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled

Farrukh Haroon — Fri, 08 Aug 2008 06:33:34 GMT

However remember the earlier Caveat I mentioned:

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2.1/release/notes/csmrn321.html#wp131341

What's New in Security Manager 3.2.1

â€¢Support for ASA 8.0 and 8.1 SSL VPN configurations. Support for SSL VPN on ASA 7.x is removed in Security Manager 3.2.1. The Security Manager 3.2.1 installer provides a warning if any ASA 7.x SSL VPN configurations are detected in the case of an upgrade.

Reagrds

Farrukh

Re: Can't add ASA in CSM 3.1.1 when WEBVPN enabled

ckuriyar74 — Tue, 12 Aug 2008 08:36:54 GMT

I tried changing ports for both ASDM and WEbVPN.

Now I could able to import the ASA in CSM.