topic Re: ASDM on Ubuntu in Network Security

ASDM on Ubuntu

RAINER PARZER — Tue, 12 Mar 2019 09:04:42 GMT

Since a long time i'm dealing with different ASDM issues.

Now i have a new Problem ... and i can't fix it.

index.html shows up different ... so i cannot connect to the ASDM anymore with my Ubuntu (14.04) machine.

Can anybody help?

Does anybody know why ASDM is such a crap for a so long time?

Thanks a lot

Rainer

This may have nothing to do

Rahul Govindan — Thu, 16 Mar 2017 18:50:46 GMT

This may have nothing to do with ASDM. Firefox recently removed support for java plugins (java web start) from version 52.

https://www.java.com/en/download/help/firefox_java.xml

Did your Firefox browser recently update itself? If so, try using an older version of Firefox to see if you see the "Run ASDM" option.

yes ... you are right! thanx

RAINER PARZER — Mon, 20 Mar 2017 10:27:20 GMT

yes ... you are right! thanx

but i have the same issue with chrome.

is it possible to install ASDM on Ubuntu native?

on my MAC i can start ASDM, but it stops always when "discovering device Version" at 15%

I believe that chrome also

Rahul Govindan — Mon, 20 Mar 2017 11:40:34 GMT

I believe that chrome also has the Java plug-in disabled by default for a while now. The ASDM release notes don't mention Ubuntu, but does mention other Linux distros. You could try installing the ASDM if this gives you an option. Try the latest 7.7 which should have all the bug fixes.

It's been a while but I've

Marvin Rhoads — Mon, 20 Mar 2017 13:52:55 GMT

It's been a while but I've installed and run ASDM on Ubuntu 10.04 LTS release.

As Rahul mentioned, it's 99% of the time a browser and Java issue that trips you up. If you update your Java and ASDM to the respective latest versions (though I'd back off one on ASDM TO 7.6(2)), you should have good compatibility.

If you can get the JNLP file to download then you can save and launch it locally as a Java Web Start app.

Hi.

johnd2310 — Wed, 22 Mar 2017 07:38:02 GMT

Hi.

Try installing Icedtea (icedtea-plugin) on Ubuntu. I use that on my Ubuntu workstations.

Thanks

John

I just labbed it up and that

Marvin Rhoads — Wed, 22 Mar 2017 12:57:35 GMT

I just labbed it up and that worked fine. First I downloaded Java from Oracle and followed the instructions to enable it in Firefox. That allows Firefox to recognize Java is installed and it will then give you the option for downloading the JNLP file when you browse to your ASA address with /admin appended for management.

Then install the plugin:

apt install icedtea-netx

Then after it installs, run the jnlp file from your ASA using javaws:

javaws <path>/asdm.jnlp

That got me up and running:

Here is what I do. Install

Philip D'Ath — Thu, 23 Mar 2017 04:11:50 GMT

Here is what I do. Install java web start (aka icedtea).

sudo apt-get install icedtea-plugin

Then I have a single line script, which I call asdm.

javaws https://$1/admin/public/asdm.jnlp

Make it executable:

chmod +x asdm

Then to run ASDM on say, 1.2.3.4:

./asdm 1.2.3.4

This doesn't require any web browser, or web browser support. It just uses the native installed java directly.

Re: I just labbed it up and that

Malatji — Sun, 17 Jun 2018 23:27:10 GMT

Hi Martin, please provide more detail

Re: ASDM using icedtea-plugin on Ubuntu

bstewart — Tue, 07 Aug 2018 01:42:16 GMT

Works for me, using Ubuntu 18.04 Bionic Beaver kernels 4.15.0-30 and some older versions.

Because I don't have a real certificate installed on my ASA, just self-signed, it'll clunk around the first couple of times asking if you're really really sure you trust it because it's only self-signed, and it'll want to install itself on your desktop (I haven't yet tried connecting to an older ASA - I ran this using ASA 9.10 beta and corresponding ASDM 7.10 but it's supposed to be backward compatible.)

Re: ASDM using icedtea-plugin on Ubuntu

Malatji — Mon, 20 Aug 2018 03:40:01 GMT

I need a lot of info on this, any resources I can follow?

Re: ASDM on Ubuntu

Oliverrietbrock — Mon, 06 Jan 2020 16:06:55 GMT

Hello,

Since Cisco removed the ASDM "web-start" capability from ASA 9.8.3 (18) the solution is not valuable any longer.

I propose an new solution to run ASDM in Linux (Desktop):

Install ASDM software package from the ASA on a Windows client first or request the extracted ASDM files from the cisco support.
Copy the installed ASDM folder in Windows ( C:\Program Files (x86)\Cisco Systems\ASDM\ ) to your Linux OS (eg. /usr/local/share/cisco/asdm) and change ownership if necessary
Go to your Linux OS:
Download the java runtime environment JavaJRE version 8, from either Oracle or OpenJRE (eg. AdoptOpenJDK) as tar.gz
Choose a proper extraction folder for JRE (in my case it was /usr/local/share/cisco/asdm/openjre/ and be aware it create subfolder with version number in it)
Rename or move the JAVA files for easier scripting and maintance
Create a shell script, as it already exists in the ASDM folder: /usr/local/share/cisco/asdm/asdm.sh (the template is asdm-launcher.sh)
Define the location of the "java" run program is allocated in the system: JAVABIN=/usr/local/share/cisco/asdm/openjre/bin/
Define the location of the applets (*.jar): ASDMLIB=/usr/local/share/cisco/asdm/
The rest of the shell script can be taken from the asdm-launcher.sh file.

#!/bin/bash
# Script asdm.sh to launch ASDM java application under Linux
# Tested with AdoptOpenJRE Version 8 and Oracle JRE Version 8
ASDMLIB=/usr/local/share/cisco/asdm/
JAVABIN=${ASDMLIB}/openjre/bin/
exec ${JAVABIN}java -Xms64m -Xmx512m -XX:MaxNewSize=1024k \
 -Dsun.swing.enableImprovedDragGesure=true \
 -Dapple.laf.useScreenMenuBar=true \
 -Dapple.awt.graphics.UseQuartz=true \
 -classpath \ 
  ${ASDMLIB}lzma.jar:${ASDMLIB}jploader.jar:${ASDMLIB}asdm-launcher.jar:${ASDMLIB}retroweaver-rt-2.0.jar \
 com.cisco.launcher.Launcher

# ASDMLIB and JAVABIN are absolute path to the directories 
# Changer ownership and make the script executable chown and chmod +x

You can also create executable desktop link eg. asdm.desktop and run the asdm.sh shell from the GUI

[Desktop Entry]
Version=1.0
Exec=/usr/local/share/cisco/asdm/asdm.sh
Name=Cisco ASDM Linux
GenericName=Cisco ASDM
Comment=Connect to Cisco ASA Device Management on Linux
Encoding=UTF-8
Terminal=true
Type=Application
Categories=Application;Network;

Tested Version: ASA 9.13 & ASDM 7.13 and earlier

Tested Linux: Ubuntu 19.10, SUSE 12.4

Tested JRE: Version 8 Release Version 232

Re: ASDM on Ubuntu

bitgin — Thu, 13 Feb 2020 13:32:46 GMT

I've only been able to get it working by following this guide:

https://noobient.com/2019/09/26/cisco-asdm-on-64-bit-ubuntu-18-04/

64bit java (and the lack of 32bit support under Ubuntu) was the cause of my getting this error when trying to launch asdm:

Caused by: java.lang.ArrayIndexOutOfBoundsException: Index 1 out of bounds for length 1

Download the 32bit tarball from Oracle
Extract it to /somewhere
Install the dependencies: sudo apt install libxrender-dev:i386 libxtst-dev:i386 libgtk-3-dev:i386 libcanberra-gtk-module:i386 gtk2-engines-murrine:i386
Run ASDM with: /somewhere/bin/javaws https://ASDMurl/admin/public/asdm.jnlp

If you don't have real certs on your devices you'll probably need to run the ContolPanel script in your 32bit java directory and add an exception in the security tab.

Re: Here is what I do. Install

Th0rv4l — Sat, 25 Jul 2020 03:30:03 GMT

Thank you for your advice.

Re: ASDM on Ubuntu

Sebastian.Seine1 — Sat, 14 Nov 2020 11:30:46 GMT

This is amazing! This is the working solution!

It solved all of my Problems over the last year to start the ASDM Java GUI on my RaspberryPi.

All other versions opned the Login GUI but after username and password, the java GUI was closed directly.

Thanks so much!

Re: ASDM on Ubuntu

brian.black — Wed, 03 Aug 2022 03:30:38 GMT

I thought I had struck gold when I found this post, but I cannot get it working with the Firepower modules in ASDM. The ASA proper GUI all seems to work fine, but the Firepower-specific tabs and GUI menu items--while present and clickable--won't load the content when you click on them.

Anyone with an ASA with Firepower module get this working?

Re: ASDM on Ubuntu

MICHAEL BRENNER — Wed, 29 Mar 2023 12:40:30 GMT

Now it is 2022-2023 and this solution needs a tweak. Cisco has not updated the asdm-launcher.sh for the current 7.18 + ASDM. But they DID update "run.bat". Instead of the java launch parameters from the old linux shell command, I had to use the line from run.bat, replacing semi-colons with colons (for sh vs cmd.)

My final adsm.sh is as follows:

#! /usr/bin/bash # Script asdm.sh to launch ASDM java application under Linux # gnome-desktop and xRDP installed on Ubuntu server 22.04 # Running with Oracle JRE Version 8 2023-mar-29 # # To set up.... # download jre-8u361-linux-x64.tar.gz (from Oracle) and unpack # Copy jre from downloaded/unpacked to /usr/share/java # (/usr/share/java will now contain a bin folder with the java run files) # On Win after installing ASDM-IDM on Win.... # Use sftp to copy C:\Program Files (x86)\Cisco Systems\ASDM to /usr/share/asdm # /usr/share/asdm now contains the needed jar files and cert.PEM # copy this file (asdm.sh) to /usr/share/asdm # I needed to strip ^M and \r from my asdm.sh after copying from win. # Search How to remove CTRL-M (^M) characters (I use sed) # Change ownership and make the script executable chown and chmod +x # # If the chown and chmod are correct... # log on to desktop. start a terminal. run /usr/share/asdm/asdm.sh to start the party ASDMLIB=/usr/share/asdm/ JAVABIN=/usr/share/java/bin/ echo Starting ASDM Launcher exec ${JAVABIN}java -Xms64m -Xmx512m -Dsun.swing.enableImprovedDragGesture=true \ -classpath lzma.jar:jploader.jar:asdm-launcher.jar:retroweaver-rt-2.0.jar \ com.cisco.launcher.Launcher cert.PEM # ASDMLIB and JAVABIN are absolute path to the directories ~

Re: ASDM on Ubuntu

MICHAEL BRENNER — Wed, 29 Mar 2023 12:43:59 GMT

See my 2023-mar-29 reply

The cert.PEM is critical to downloading the modules now.

Re: ASDM on Ubuntu

dataspindle — Sat, 16 Dec 2023 03:54:10 GMT

WOW this works... perfectly! I even tried it with the newer JRE 8u371. Only change I made was making a subfolder called jre8 and adjusting the script accordingly. This seems very solid. Thanks so much for your efforts! No more Windows VM to open ASDM