topic Have you verify the asdm in Network Security

Why I can run my asdm ?

glauciomelo — Tue, 12 Mar 2019 07:38:00 GMT

I tried all day, but I am unable to run my asdm.

I configure the hhtp server , the user , the aaa,the crypto key, but doesn't open.

I can ping my firewall interface,somebody can help me ?

hostname ciscoasa
enable password 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/1
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface Ethernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
management-only
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
!
ftp mode passive
pager lines 24
logging asdm informational
mtu management 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-717.bib
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
no ssh stricthostkeycheck
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd enable management
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username cisco password 3USUcOPFUiMCO4Jk encrypted
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:3d6fd3b23bdf0f05376a43a0b5a1094a

Have you verify the asdm

ron.pickar — Mon, 18 Apr 2016 19:50:41 GMT

Have you verify the asdm image path and file.

asdm image disk0:/asdm-717.bib --> The files I have worked with are BIN files.

Thanks,

Ron

I change the file, sorry.

glauciomelo — Mon, 18 Apr 2016 20:06:01 GMT

I change the file, sorry.

this is the correct:

ciscoasa# sh asdm image
Device Manager image file, disk0:/asdm-717.bin

When you say " I am unable

Marvin Rhoads — Tue, 19 Apr 2016 02:23:20 GMT

When you say " I am unable to run my asdm", what exactly are the symptoms you see?

You've only given us a partial configuration - some problems can be related to the ASA version, for example.

Are you able to browse to the management interface address via https://192.168.1.1/admin and see the ASDM launcher/installer web page?

Have you looked at the ASDM troubleshooting page to rule out common problems?

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/110282-asdm-tshoot.html

NO, I am not able to run

glauciomelo — Tue, 19 Apr 2016 12:41:18 GMT

NO, I am not able to run nothing ,the page doesn't open.

Yes, I checked the page, I checked java version, I tried antivirus almost everything I tried.

ciscoasa# sh ssl
Accept connections using SSLv2, SSLv3 or TLSv1 and negotiate to TLSv1
Start connections using TLSv1 and negotiate to TLSv1
Enabled cipher order: des-sha1
Disabled ciphers: 3des-sha1 rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 dhe-aes128-sha1 dhe-aes256-sha1 null-sha1
No SSL trust-points configured
Certificate authentication is not enabled

ciscoasa# sh asdm image
Device Manager image file, disk0:/asdm-717.bin

I added my asdm as an

glauciomelo — Tue, 19 Apr 2016 12:44:58 GMT

I added my asdm as an exception on the java.

Hi,

Aditya Ganjoo — Tue, 19 Apr 2016 13:20:05 GMT

Hi,

Can you use the following command:

no ssl encryption des-sha1

And then test ?

It seems all your encryptions except des-sha1 are turned off.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

I did, and still the same...

glauciomelo — Tue, 19 Apr 2016 13:25:29 GMT

I did, and still the same...

It looks like you probably

Marvin Rhoads — Tue, 19 Apr 2016 13:36:47 GMT

It looks like you probably don't have the free 3DES-AES license installed. Without that you won't have the stronger ciphers available. Those are required for Java (whose libraries ASDM uses) to negotiate a secure connection to the ASA.

Now I actived the licence.

glauciomelo — Tue, 19 Apr 2016 13:53:08 GMT

Now I actived the licence.

Still the same.

Now that you've activated the

Marvin Rhoads — Tue, 19 Apr 2016 13:58:32 GMT

Now that you've activated the license, you need to go in and turn on those strong ciphers.

From the cli configuration mode, please enter:

ssl encryption aes128-sha1 aes256-sha1 3des-sha1