topic Thanks for the suggestione. I in Network Security

ASDM Launcher not able to connect on Windows 10

Luigi Gangitano — Tue, 12 Mar 2019 07:36:33 GMT

Hi all,

On a new PC with Windows 10 and latest java (1.8.0_77), ASDM 1.7 is unable to connect to any firewall.

Error "java.lang.NoClassDefFoundError: Could not initialize class jdk.nashorn.internal.parser.Lexer" is caused by

java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\Program Files (x86)\Java\jre1.8.0_77\lib\ext\nashorn.jar" "read")

I've checked file permissions and nothing is wrong. Does anybody else experience the same behavior and has resolved it?

Thanks a lot.

I had that same problem once,

nwdls8725 — Mon, 11 Apr 2016 20:05:46 GMT

I had that same problem once, and I had to downgrade my java version to 6.

Hi Luigi,

Aditya Ganjoo — Tue, 12 Apr 2016 00:07:05 GMT

Hi Luigi,

Please share the show version of the ASA.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Here it comes the relevant

Luigi Gangitano — Tue, 12 Apr 2016 09:47:38 GMT

Here it comes the relevant part:

Cisco Adaptive Security Appliance Software Version 9.3(1)

Device Manager Version 7.5(2)153

Hi,

Aditya Ganjoo — Tue, 12 Apr 2016 10:24:36 GMT

Hi,

Please go to the JAVA console on the Win 10 machine and you can lower the security settings in Java>Security tab on workstation.

Set the security setting to MEDIUM.

Also add the ASDM url in the exception list and then try.

Let me know if it works.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Hi Aditya,

Luigi Gangitano — Tue, 12 Apr 2016 12:32:26 GMT

Hi Aditya,

There is no 'Medium' security settings in Java 1.8.0_77 control panel on Windows 10. Lowest setting is 'High'.

Since this is not Java Web Start edition of ASDM but coming from the ASDM-IDM Launcher, adding the ASA IP address to the Exception Site List had no effect on the issue. Still it fails with Security Access denied accessing the local nashorn.jar.

Hi Luigi,

Aditya Ganjoo — Tue, 12 Apr 2016 16:47:50 GMT

Hi Luigi,

The last thing you can try is installing the JAVA again and then test.

Make sure Windows have a path to find javaw.exe by putting path in Windows path variable.
Usually javaw.exe would be copied into c:\Windows\System32 or c:\Windows\SysWoW64 or C:\ProgramData\Oracle\Java\javapath. So add one of these path into path system variable to find out javaw executable.

Regards,

Aditya

Thanks for the suggestione. I

Luigi Gangitano — Wed, 13 Apr 2016 08:39:40 GMT

Thanks for the suggestione. I tried to re-install JRE (both 32-bit and 64-bit version) without luck.

javaw.exe is definitely reachable, ASDM Launcher starts correctly but is not able to connect to firewalls. As soon as I click 'Connect' it start spinning and the Java console shows the AccessControlException I reported in the original message.

It looks like the security profile for the local application (asdm-launcher.jar) does not allow for access to all the relevant libraries, but I don't know how to change it.

Did you try using another Win

Aditya Ganjoo — Wed, 13 Apr 2016 08:45:10 GMT

Did you try using another Win 10 PC and try ?

On your PC can you test running the ASDM launcher as administrator ?

Regards,

Aditya

Hello Luigi,

Sebastian Guevara — Wed, 13 Apr 2016 13:53:26 GMT

Hello Luigi,

If you have no security concerns about Java version running, give 7u80 a try and check if you still get the same error.

BR,

Seb.

I got another freshly

Luigi Gangitano — Wed, 13 Apr 2016 22:08:13 GMT

I got another freshly installed Windows 10 PC and it showed the same behavior. On an old Windows 10 VM that was upgraded from Windows 8.1, same JRE, everything is fine.

I cannot understand what's blocking this file access. I've also checked C:\Program Files (x86)\Cisco Systems\ASDM folders on both PCs and found no differences.

Java 1.7u80 works correctly,

Luigi Gangitano — Wed, 13 Apr 2016 22:47:52 GMT

Java 1.7u80 works correctly, thanks. But i'd prefer to keep using a supported version.

Do you have a proxy server

Kevin Debelak — Thu, 23 Jun 2016 17:07:35 GMT

Do you have a proxy server configured? I experience this when I have a proxy enabled in Internet Settings > Connections tab, but if I disable the proxy it works.

Even though my proxy is configured to bypass for local IPs, it seems to be some security issue for ASDM application to read the proxy settings?

Thanks for the answer, this

Luigi Gangitano — Thu, 23 Jun 2016 17:31:07 GMT

Thanks for the answer, this seems to be the cause of my problem. Turning off 'Automatic Proxy Configuration' option in Edge enables ASDM Launcher to reach our ASA devices.

Do you know if there is any workaround fixing this problem while keeping the Proxy settings active?

I just opened a case with

Kevin Debelak — Thu, 23 Jun 2016 18:52:10 GMT

I just opened a case with Cisco TAC, seems like it might be a bug in ASDM launcher / not following Java 8 security standards. I am seeing an error in Java log:

java.lang.ExceptionInInitializerError

Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "C:\Program Files (x86)\Java\jre1.8.0_91\lib\ext\nashorn.jar" "read")

I can post back when I get the verdict from Cisco.

The other workaround I found is to to to Configure Java and under Network change it to connect directly. I'm not sure what other security implications this has since you are now bypassing the proxy for all Java programs?

Did you ever get an answer

Luigi Gangitano — Sat, 27 Aug 2016 20:37:13 GMT

Did you ever get an answer from TAC on this subject?

Cisco is telling me that this

Kevin Debelak — Mon, 24 Oct 2016 14:08:30 GMT

Cisco is telling me that this is a bug in Java. I don't totally agree with them but I don't have the time to spend on this. I just set my Java network settings to connect directly. Not exactly ideal.

from Cisco TAC:

============
SOLUTION
============
We review the java error that the customer send us. We see that this was a java bug.
Then we sent the workaround so he can open the asdm using java 8 but with direct connection in his computer.

java control panel/ network settings/ check the box --> direct connection and try again to open the ASDM, but we warning that this change it could affect your other applications (that use java) and required to access internet.

Really helpful to my ASDM

Wed, 17 May 2017 02:38:47 GMT

Really helpful to my ASDM issue. Tried re-install ASDM & Java days, this is the painful memory...

Thanks a lot!

I'm using Windows 10, with JRE 1.8.131 (latest version) and ASDM 7.52, it works great!

Re: I got another freshly

rickyrocker — Mon, 24 Jun 2019 19:40:36 GMT

Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" nashorn.jar "read")

To resolve the issue, open MS Edge browser, go to settings => advanced => proxy and disable "auto detect proxy"

I know this is old but hopefully it helps someone - as I have just wasted a LOT of time on the issue.

Microsoft is sometimes truly beyond a joke.

Re: Thanks for the answer, this

lpsalazar — Tue, 23 Jul 2019 00:01:41 GMT

thanks Works for me, thanks a lot