topic Re: Unable to access ASDM from INSIDE interface - ASA5506 in Network Security

Unable to access ASDM from INSIDE interface - ASA5506

BigDog64 — Sat, 20 Feb 2021 19:17:23 GMT

Can't seem to wrap my head around this...

There's an ASA 5506-X sitting on my desk directly connected to my laptop.

I'm having no issue connecting to ASDM when the laptop is connected to the management interface. However when I connect the laptop to the inside interface, I get an ASDM error "Unable to launch device manager from 192.168.10.1".

I've configured multiple ASAs in the past and I've never encountered this. I need to be able to access ASDM from the inside, not just from the management interface.

I can ssh and ping to the inside interface from the laptop.

Here's the related configs:

int g0/0
 nameif inside
 ip addr 192.168.10.1 255.255.255.0
 no shut
!
http server enable
http 0 0 inside

Re: Unable to access ASDM from INSIDE interface - ASA5506

balaji.bandi — Sat, 20 Feb 2021 19:44:09 GMT

Config looks ok

int g0/0
 nameif inside
 ip addr 192.168.10.1 255.255.255.0
security-level 100      < add this line
no shut

Try remove http config and add back

no http server enable
no http 0 0 inside

http server enable
http 0.0.0.0 0.0.0.0 inside

try from Pc https://192.168.10.1 ?

Re: Unable to access ASDM from INSIDE interface - ASA5506

BigDog64 — Sun, 21 Feb 2021 00:46:58 GMT

This did not resolve the issue.

Re: Unable to access ASDM from INSIDE interface - ASA5506

B. BELHADJ — Sun, 21 Feb 2021 08:51:41 GMT

Hello

Your config looks good.

Try to upgrade your Code to a new version.

Best regards

Re: Unable to access ASDM from INSIDE interface - ASA5506

balaji.bandi — Sun, 21 Feb 2021 10:39:21 GMT

Post complete configuration of ASA, show version to look what wrong?

1. are you able to ping ASA IP address?

2. from ASA are you able to ping the device IP address

3. what is the PC gateway? is the ASA IP address?

Re: Unable to access ASDM from INSIDE interface - ASA5506

Marius Gunnerud — Sun, 21 Feb 2021 20:54:28 GMT

Run the command show run asdm and dir.

Without seeing your complete configuration, a possible issue could be that you either not have an ASDM image configured, the ASDM image is not present in flash, or the ASDM image is corrupt or not supported by the ASA version.

Re: Unable to access ASDM from INSIDE interface - ASA5506

BigDog64 — Mon, 22 Feb 2021 01:12:59 GMT

As stated in the original post, I am able to ping the ASA inside interface from the PC.

I am also able to ping the PC from the ASA.

The gateway of the PC is set to the ASA's inside interface.

***I'll post both the show run and show version tomorrow.

Re: Unable to access ASDM from INSIDE interface - ASA5506

BigDog64 — Mon, 22 Feb 2021 01:09:14 GMT

I mean, I'm able to access ASDM when the PC is connected via the management interface. In my mind, if this was an ASDM image issue, I wouldn't be able to access ASDM at all, right?

Again: I'm only able to access ASDM from the management interface, when I disconnect my PC from the management interface and connect it to the inside interface, I get the "Unable to access device manager..." error (and yes, I reconfigure the PC's IP configuration accordingly).

Not my first rodeo with ASAs, but I've never encountered this issue before. There seems a bunch of similar issues on these boards, but none that only allows ASDM access via management, and errors out for inside.

Re: Unable to access ASDM from INSIDE interface - ASA5506

BigDog64 — Mon, 22 Feb 2021 01:12:03 GMT

I suspected it may be some issue with the current ASA version... Note that this is a straight out-of-the-box new ASA 5506-X purchased from Cisco. However, I've received multiple 5506-X in the past, and never encountered this issue.

I'll try upgrading it, if all else fails.

Re: Unable to access ASDM from INSIDE interface - ASA5506

balaji.bandi — Mon, 22 Feb 2021 10:39:13 GMT

Sure post complete configuration to understand the issue.

Re: Unable to access ASDM from INSIDE interface - ASA5506

Marius Gunnerud — Tue, 23 Feb 2021 13:31:45 GMT

Make sure to check the compatibility matrix to be sure that the ASDM version you are running is also compatible with the ASA version.

https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#id_65776

Re: Unable to access ASDM from INSIDE interface - ASA5506

B. BELHADJ — Tue, 23 Feb 2021 19:50:24 GMT

This could confirm what I suspect!

Please try it. I don't see any issue on your configuration or the ASDM image because you can access it from the Management interface.

let us know!

Best regards