topic Was ASDM working with the in Network Security

ASA5506-X don't connect ASDM-IDM Launcher

tomas.rybicka — Tue, 12 Mar 2019 09:24:21 GMT

Hello,

i have change the inside interface from default address 192.168.1.1 255.255.255.0 to address 10.13.0.100 255.255.0.0.

And change "http 10.13.0.0 255.255.0.0 inside".

Now i can see over browser "https://10.13.0.100/admin" site to download ASDM Launcher.

Downloaded and installed, but i can't connect to device 10.13.0.100 now.

Without errors, only message "Contacting the device. Please wait.."

I have wrong config ?

Was ASDM working with the

Marvin Rhoads — Tue, 23 May 2017 11:21:52 GMT

Was ASDM working with the previous addressing?

What are your ASA, ASDM and Java versions?

Yes, ASDM working correctly

tomas.rybicka — Tue, 23 May 2017 11:45:55 GMT

Yes, ASDM working correctly with the previous address.

ASA Version 9.6(1), DM Version 7.6(1), Java Version 8 Update 121, ASDM-IDM Version 1.7(0).

I now checked JAVA errors:

Using JRE version 1.8.0_121 Java HotSpot(TM) Client VM
User home directory = C:\Users\tomas.rybicka
----------------------------------------------------
c:   clear console window
f:   finalize objects on finalization queue
g:   garbage collect
h:   display this help message
m:   print memory usage
q:   hide console
s:   dump system properties
----------------------------------------------------
Application Logging Started at Tue May 23 13:44:02 CEST 2017
---------------------------------------------
Local Launcher Version = 1.7.0
Local Launcher Version Display = 1.7(0)
OK button clicked
java.lang.ExceptionInInitializerError
   at jdk.nashorn.internal.parser.Parser.parse(Parser.java:275)
   at jdk.nashorn.internal.parser.Parser.parse(Parser.java:249)
   at jdk.nashorn.internal.runtime.Context.compile(Context.java:1284)
   at jdk.nashorn.internal.runtime.Context.compileScript(Context.java:1251)
   at jdk.nashorn.internal.runtime.Context.compileScript(Context.java:627)
   at jdk.nashorn.api.scripting.NashornScriptEngine.compileImpl(NashornScriptEngine.java:535)
   at jdk.nashorn.api.scripting.NashornScriptEngine.compileImpl(NashornScriptEngine.java:524)
   at jdk.nashorn.api.scripting.NashornScriptEngine.evalImpl(NashornScriptEngine.java:402)
   at jdk.nashorn.api.scripting.NashornScriptEngine.eval(NashornScriptEngine.java:155)
   at javax.script.AbstractScriptEngine.eval(Unknown Source)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler.jsGetProxyInfo(Unknown Source)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler.access$100(Unknown Source)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler$2.run(Unknown Source)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler$2.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler.jsGetProxyInfo(Unknown Source)
   at com.sun.deploy.net.proxy.SunAutoProxyHandler.getProxyInfo(Unknown Source)
   at com.sun.deploy.net.proxy.DynamicProxyManager.getProxyList(Unknown Source)
   at com.sun.deploy.net.proxy.DeployProxySelector.select(Unknown Source)
   at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(Unknown Source)
   at sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source)
   at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
   at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(Unknown Source)
   at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
   at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
   at com.cisco.launcher.s.new(Unknown Source)
   at com.cisco.launcher.s.actionPerformed(Unknown Source)
   at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
   at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
   at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
   at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
   at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
   at java.awt.Component.processMouseEvent(Unknown Source)
   at javax.swing.JComponent.processMouseEvent(Unknown Source)
   at java.awt.Component.processEvent(Unknown Source)
   at java.awt.Container.processEvent(Unknown Source)
   at java.awt.Component.dispatchEventImpl(Unknown Source)
   at java.awt.Container.dispatchEventImpl(Unknown Source)
   at java.awt.Component.dispatchEvent(Unknown Source)
   at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
   at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
   at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
   at java.awt.Container.dispatchEventImpl(Unknown Source)
   at java.awt.Window.dispatchEventImpl(Unknown Source)
   at java.awt.Component.dispatchEvent(Unknown Source)
   at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
   at java.awt.EventQueue.access$500(Unknown Source)
   at java.awt.EventQueue$3.run(Unknown Source)
   at java.awt.EventQueue$3.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.awt.EventQueue$4.run(Unknown Source)
   at java.awt.EventQueue$4.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.awt.EventQueue.dispatchEvent(Unknown Source)
   at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
   at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
   at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
   at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
   at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
   at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\Program Files (x86)\Java\jre1.8.0_121\lib\ext\nashorn.jar" "read")
   at java.security.AccessControlContext.checkPermission(Unknown Source)
   at java.security.AccessController.checkPermission(Unknown Source)
   at java.lang.SecurityManager.checkPermission(Unknown Source)
   at com.sun.deploy.security.SelectableSecurityManager.checkPermission(Unknown Source)
   at java.lang.SecurityManager.checkRead(Unknown Source)
   at java.io.File.isDirectory(Unknown Source)
   at sun.net.www.ParseUtil.fileToEncodedURL(Unknown Source)
   at sun.security.provider.PolicyFile.canonicalizeCodebase(Unknown Source)
   at sun.security.provider.PolicyFile.access$700(Unknown Source)
   at sun.security.provider.PolicyFile$5.run(Unknown Source)
   at sun.security.provider.PolicyFile$5.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at sun.security.provider.PolicyFile.getPermissions(Unknown Source)
   at sun.security.provider.PolicyFile.getPermissions(Unknown Source)
   at sun.security.provider.PolicyFile.implies(Unknown Source)
   at java.security.ProtectionDomain.implies(Unknown Source)
   at java.security.ProtectionDomain.impliesCreateAccessControlContext(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at jdk.nashorn.internal.runtime.options.Options.getBooleanProperty(Options.java:154)
   at jdk.nashorn.internal.runtime.options.Options.getBooleanProperty(Options.java:179)
   at jdk.nashorn.internal.parser.Lexer.<clinit>(Lexer.java:67)
   ... 63 more
Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException
   at com.cisco.launcher.s.new(Unknown Source)
   at com.cisco.launcher.s.actionPerformed(Unknown Source)
   at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
   at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
   at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
   at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
   at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(Unknown Source)
   at java.awt.Component.processMouseEvent(Unknown Source)
   at javax.swing.JComponent.processMouseEvent(Unknown Source)
   at java.awt.Component.processEvent(Unknown Source)
   at java.awt.Container.processEvent(Unknown Source)
   at java.awt.Component.dispatchEventImpl(Unknown Source)
   at java.awt.Container.dispatchEventImpl(Unknown Source)
   at java.awt.Component.dispatchEvent(Unknown Source)
   at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)
   at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)
   at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)
   at java.awt.Container.dispatchEventImpl(Unknown Source)
   at java.awt.Window.dispatchEventImpl(Unknown Source)
   at java.awt.Component.dispatchEvent(Unknown Source)
   at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
   at java.awt.EventQueue.access$500(Unknown Source)
   at java.awt.EventQueue$3.run(Unknown Source)
   at java.awt.EventQueue$3.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.awt.EventQueue$4.run(Unknown Source)
   at java.awt.EventQueue$4.run(Unknown Source)
   at java.security.AccessController.doPrivileged(Native Method)
   at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
   at java.awt.EventQueue.dispatchEvent(Unknown Source)
   at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
   at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
   at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
   at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
   at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
   at java.awt.EventDispatchThread.run(Unknown Source)

Please verify your Java

Marvin Rhoads — Tue, 23 May 2017 12:00:13 GMT

Please verify your Java Security settings are like the following:

The JAVA security is equal.

tomas.rybicka — Tue, 23 May 2017 12:41:38 GMT

The JAVA security is equal.

I have tested ASDM over Java Web Start, ist works fine.

But IDM-Launcher not.

Tomas,

Marvin Rhoads — Tue, 23 May 2017 12:54:51 GMT

Tomas,

You might try clearing your Java and ASDM caches (ASDM first). On a Windows system the ASDM chace should be located at:

C:\Users\<username>\.asdm\cache

Cache deleted, status

tomas.rybicka — Tue, 23 May 2017 13:20:56 GMT

Cache deleted, status unchanged. (Unknown Source)

What is the ASDM version on

Marvin Rhoads — Tue, 23 May 2017 13:23:30 GMT

What is the ASDM version on the ASA?

Version 7.6.1

tomas.rybicka — Tue, 23 May 2017 13:25:04 GMT

Version 7.6.1

Sorry - you mentioned that

Marvin Rhoads — Tue, 23 May 2017 13:55:14 GMT

Sorry - you mentioned that earlier.

I'm not sure what's going on with your ASDM Launcher. I've used that exact combination of versions including Java successfully several times.

My only other suggestion would be to try updating to the newest ASDM 7.8(1), unistall the launcher and then install that new launcher. (It will be 1.8(0).)

Thanks for you help.

tomas.rybicka — Tue, 23 May 2017 14:00:01 GMT

Thanks for you help.

I will be use ASDM ower Java Web Start now.

Bye

Hi,

tomas.rybicka — Thu, 25 May 2017 09:07:04 GMT

Hi,

interesting is when i plug patch cable directly between ASA and my computer, it works with the new IP Address. But when i use switch between boths, do not work.

Switch is OK because ASDM works over Java Web Start, but not over Launcher.

Hmm, now that's changed from

Marvin Rhoads — Thu, 25 May 2017 10:19:21 GMT

Hmm, now that's changed from a bit curious to more bizarre. If you ever ascertain exactly what's going on there please let us know.

I'm quite curious to know how having a switch in the path causes one Java app to fail while another works (and both work with no switch!).

I'd do a packet capture (with a capture filter of only traffic to/from the ASA) of both cases from the PC and compare.

Re: Hmm, now that's changed from

barrau.sebastien — Wed, 12 Sep 2018 14:09:01 GMT

Hello,

in case of unsolved problem,

in my case, i installed JRE 1.6 and it's solved it.

Re: ASA5506-X don't connect ASDM-IDM Launcher

David_Comstock — Wed, 12 Dec 2018 17:39:41 GMT

I was able to fix this by disabling our Automatic configuration script inside Internet Explorers LAN Settings

Paths to settings:

Internet Explorer -> Tools -> Options -> Connections(Tab) -> LAN settings

Unchecked "Automatically detect settings"

Unchecked "Use automatic configuration script"

Restarted ASDM and was able to connect

Alternative method I was able to fix it by:

Ran "Java" Control Panel Item (Or "Configure Java" start menu item)

Clicked "Network Settings..."

and then "Direct Connect"

then OK and Apply

(I had to do this multiple times for it to take effect for some reason)

Notes: If these are changed you may lose the ability to use the internet if your company requires explicit proxy settings

We actually set the auto proxy script via a GPO (Internet Explorer) so when I need to manage an ASA I have to uncheck it each time before using ASDM

"Use a proxy server for your LAN" in " LAN settings" might cause this issue as well (untested)

Re: ASA5506-X don't connect ASDM-IDM Launcher

Yusuf_Islam — Thu, 07 May 2020 19:48:37 GMT

Alternative method I was able to fix it by:

Ran "Java" Control Panel Item (Or "Configure Java" start menu item)

Clicked "Network Settings..."

and then "Direct Connect"

its working now, Thanks David

Re: ASA5506-X don't connect ASDM-IDM Launcher

Yusuf_Islam_BD — Thu, 07 May 2020 20:05:52 GMT

Thanks for your help David