ASDM was unable to load the firewall's configuration with Firepower Module running

eddie.schenk — Sun, 06 Sep 2020 08:36:40 GMT

Hi,

I have been having issues getting ASDM to load with the configuration when the Firepower module is running, I have tried updated my Java to the latest, I am already running the latest ASA and ASDM versions on my 5516-X device (screen dump below) I have updated the FirePower to the version shown below but I can't find a later version to upgrade to, I have seem some discussion on 6.x but I can't find anthing later. I have trawled this site looking for a nugget that may help and all have failed so far. If I use the ASDM before the sfr module starts then I can load it ok, once the sfr module is running it always fails to get the FW config, I have even tried running it under Windows 7 with the same results. This really looks like a bug but one I can't find a fix for, is this certificate related (I am used the self signed ones but I have added it to my trusted cert store on Windows 10) or something more spurious?

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5516-X with FirePOWER services, 8GE, AC, ASA5516 JAD20xxxxxx
sfr FirePOWER Services Software Module ASA5516 JAD20xxxxxx

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 00a2.ee92.e794 to 00a2.ee92.e79c 1.1 1.1.15 9.12(4)2
sfr 00a2.ee92.e793 to 00a2.ee92.e793 N/A N/A 5.4.1-211

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 5.4.1-211

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Up Up

Cisco Adaptive Security Appliance Software Version 9.12(4)2
SSP Operating System Version 2.6(1.198)
Device Manager Version 7.14(1)

Compiled on Tue 14-Jul-20 23:25 PDT by builders
System image file is "disk0:/asa9-12-4-2-lfbff-k8.SPA"
Config file at boot was "startup-config"

HSP1 up 7 mins 24 secs

Hardware: ASA5516, 8192 MB RAM, CPU Atom C2000 series 2416 MHz, 1 CPU (8 cores)
Internal ATA Compact Flash, 8000MB
BIOS Flash M25P64 @ 0xfed01000, 16384KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is 00a2.ee92.e795, irq 255
2: Ext: GigabitEthernet1/2 : address is 00a2.ee92.e796, irq 255
3: Ext: GigabitEthernet1/3 : address is 00a2.ee92.e797, irq 255
4: Ext: GigabitEthernet1/4 : address is 00a2.ee92.e798, irq 255
5: Ext: GigabitEthernet1/5 : address is 00a2.ee92.e799, irq 255
6: Ext: GigabitEthernet1/6 : address is 00a2.ee92.e79a, irq 255
7: Ext: GigabitEthernet1/7 : address is 00a2.ee92.e79b, irq 255
8: Ext: GigabitEthernet1/8 : address is 00a2.ee92.e79c, irq 255
9: Int: Internal-Data1/1 : address is 00a2.ee92.e794, irq 255
10: Int: Internal-Data1/2 : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3 : address is 0000.0001.0003, irq 0
13: Ext: Management1/1 : address is 00a2.ee92.e794, irq 0
14: Int: Internal-Data1/4 : address is 0000.0100.0001, irq 0
The Running Activation Key feature: 500 AnyConnect Premium sessions exceed the limit on the platform, reduced to 300 AnyConnect Premium sessions.

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 150 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
Encryption-DES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
Carrier : Disabled perpetual
AnyConnect Premium Peers : 300 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 300 perpetual
Total VPN Peers : 300 perpetual
AnyConnect for Mobile : Enabled perpetual
AnyConnect for Cisco VPN Phone : Enabled perpetual
Advanced Endpoint Assessment : Enabled perpetual
Shared License : Disabled perpetual
Total TLS Proxy Sessions : 1000 perpetual
Botnet Traffic Filter : Disabled perpetual
Cluster : Enabled perpetual
Cluster Members : 2 perpetual
VPN Load Balancing : Enabled perpetual

Serial Number: JAD20xxxxxx
Running Permanent Activation Key: 0xxxxxx 0xxxxxx 0xxxxxx 0xxxxxx 0xxxxxx
Configuration register is 0x1
FPGA UPGRADE Version : 3.0
FPGA GOLDEN Version : 3.0
ROMMON Version : 1.1.15
Image type : Release
Key Version : A

topic ASDM was unable to load the firewall's configuration with Firepower Module running in Network Security

ASDM was unable to load the firewall's configuration with Firepower Module running