topic As risseth posted and Vibhor in Network Security

ASA 5508-X Missing ASDM

munzeljmm — Tue, 12 Mar 2019 06:00:25 GMT

I am in the process of configuring an ASA 5508-X. I have been following the quick start guide, but can't seem to get to the ASDM software. I am referencing it at http://192.168.1.1/ per the instructions but am getting an error that the path "/admin/public/index.html" cannot be found, instead of the links to download the software. I know I am connecting to the ASA or I wouldn't be getting redirected. When I do a "show flash" in the console I don't see any reference to any ASDM files. Am I missing something, is the device missing software, or what is up? I don't currently have a support contract and while I'm not opposed to getting one, I would like to see the device work before I spend that extra money. I would think the basic out of the box functionality should just work, no support necessary.

Can anyone point me in the right direction of where to go next?

hi,did you connect your PC to

johnlloyd_13 — Wed, 27 May 2015 06:08:44 GMT

hi,

did you connect your PC to the management port (MGMT)?

have you tried HTTPS? https://192.168.1.1

Yes, I did try connecting

munzeljmm — Wed, 27 May 2015 11:05:30 GMT

Yes, I did try connecting directly to the management port as well, but the instructions advise to plug both the management port and GigabitEthernet1/2 into a switch, along with the PC of course, so that is the configuration I have been working with the most. Good catch on the https, that was a typo on my part, I have been using it all along.

Any other ideas?

hi,kindly post show version

johnlloyd_13 — Wed, 27 May 2015 15:11:53 GMT

hi,

kindly post show version and show flash output.

Cisco Adaptive Security

munzeljmm — Wed, 27 May 2015 19:07:18 GMT

Cisco Adaptive Security Appliance Software Version 9.4(1)

Compiled on Sat 21-Mar-15 11:42 PDT by builders
System image file is "disk0:/asa941-lfbff-k8.SPA"
Config file at boot was "startup-config"

ciscoasa up 1 min 13 secs

Hardware: ASA5508, 8192 MB RAM, CPU Atom C2000 series 2000 MHz, 1 CPU (8 cores)
Internal ATA Compact Flash, 8192MB
BIOS Flash unknown @ 0x0, 0KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is 84b8.0276.fa26, irq 255
2: Ext: GigabitEthernet1/2 : address is 84b8.0276.fa27, irq 255
3: Ext: GigabitEthernet1/3 : address is 84b8.0276.fa28, irq 255
4: Ext: GigabitEthernet1/4 : address is 84b8.0276.fa29, irq 255
5: Ext: GigabitEthernet1/5 : address is 84b8.0276.fa2a, irq 255
6: Ext: GigabitEthernet1/6 : address is 84b8.0276.fa2b, irq 255
7: Ext: GigabitEthernet1/7 : address is 84b8.0276.fa2c, irq 255
8: Ext: GigabitEthernet1/8 : address is 84b8.0276.fa2d, irq 255
9: Int: Internal-Data1/1    : address is 84b8.0276.fa25, irq 255
<--- More --->

10: Int: Internal-Data1/2    : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3    : address is 0000.0001.0003, irq 0
13: Ext: Management1/1       : address is 84b8.0276.fa25, irq 0

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 50             perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 4              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 100            perpetual
Total VPN Peers                   : 100            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
Total UC Proxy Sessions           : 320            perpetual
Botnet Traffic Filter             : Enabled        perpetual
<--- More --->

Cluster                           : Disabled       perpetual
VPN Load Balancing                : Enabled        perpetual

Serial Number: [removed]
Running Permanent Activation Key: [removed]
Configuration register is 0x1
Image type : Release
Key Version : A
Configuration has not been modified since last system restart.

ciscoasa# sh vershow flash
--#-- --length-- -----date/time------ path
   93 69454656    May 02 2015 10:47:44 asa941-lfbff-k8.SPA
   94 33          May 26 2015 18:08:14 .boot_string
   11 4096        May 02 2015 10:50:36 log
   20 4096        May 02 2015 10:51:42 crypto_archive
   21 4096        May 02 2015 10:52:00 coredumpinfo
   22 59          May 02 2015 10:52:00 coredumpinfo/coredump.cfg
   95 41836544    May 02 2015 10:57:14 asasfr-5500x-boot-5.4.1-211.img

7934787584 bytes total (4600188928 bytes free)

hi,you're missing the ASDM

johnlloyd_13 — Thu, 28 May 2015 00:54:12 GMT

hi,

you're missing the ASDM image that's why you're not able to GUI into it.

download ASDM 7.4(2) and follow link below:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/upgrade/upgrade94.html#69905

Thanks for the help. Is

munzeljmm — Thu, 28 May 2015 17:46:43 GMT

Thanks for the help. Is there any way to download the ASDM without a support contract? I have an account with Cisco but do not have the necessary permissions to download the ASDM.

If you truly need a support contract... it seems pretty sad that you essentially can't use a product unless you also buy a support contract for it.

I am in the same situation:

Rene Elgaard — Tue, 11 Aug 2015 08:05:55 GMT

I am in the same situation: Received a new 5508 and no ADSM image is present on the flash.

I'd like to know who's side the error is on: me or Cisco?

I would expect a ADSM image present on a new ASA.

Hi,Yes , we have seen some

Vibhor Amrodia — Tue, 11 Aug 2015 13:25:53 GMT

Hi,

Yes , we have seen some issues with the same problem.

We are working on it.

Thanks and Regards,

Vibhor Amrodia

C'mon, what kind of response

TekNecksLLC — Sat, 19 Sep 2015 05:52:09 GMT

C'mon, what kind of response is that? We are working on it... Thanks.

Let the guy download the ASDM without a support contract. After all, Cisco should have put it there in the first place...

I have two ASA5516X's with the exact same issue. No ASDM image. Fortunately, I do have a contract on my devices, so I should be able to put Humpty Dumpty back together again.

https://tools.cisco.com

Rishabh Seth — Sat, 19 Sep 2015 06:14:15 GMT

https://tools.cisco.com/bugsearch/bug/CSCuv96789/?referring_site=bugquickviewredir

As risseth posted and Vibhor

Marvin Rhoads — Sat, 19 Sep 2015 19:53:19 GMT

As risseth posted and Vibhor alluded to, this is a known manufacturing defect. Cisco has fixed the root cause but units in the delivery channel may still turn up.

If you get a unit affected my a manufacturing defect (or a security advisory as well), you can open a TAC case without a support contract.

You need to do it via phone and explain your circumstance to the Cisco representative; but they should open a case for you.

We just received an ASA5506-X

keenlogic — Mon, 11 Jan 2016 22:18:27 GMT

We just received an ASA5506-X on Friday and we are having the same issue with the ASDM image missing.

keenlogic,

Marvin Rhoads — Mon, 11 Jan 2016 22:23:35 GMT

keenlogic,

You can just download the ASDM image from cisco.com (with a support contract) or open a TAC case citing the bugID to be given access to the file (without a support contract).

I opened a TAC case. Now just

keenlogic — Mon, 11 Jan 2016 22:28:45 GMT

I opened a TAC case. Now just waiting for them to call me back.

I went through the same

TekNecksLLC — Mon, 11 Jan 2016 22:40:25 GMT

I went through the same process a few month's back. Had to manually load the ASDM image using a TFTP server on my laptop, much like upgrading the firmware.

I did finally get my ASA working, fortunately I had a support contract. I recall the Cisco instructions were pretty clear on how to resolve this.

It did, however, take me a few days to admit defeat and call TAC for help. Wish I could get those days back somehow.

Good luck!!

Just to follow up on my own

Rene Elgaard — Wed, 13 Jan 2016 06:53:37 GMT

Just to follow up on my own post:

I did (and do) not have a support contract, and TAC was not very helpful, despite me describing the situation.

They directed me to the dealer which in turn together with the local distributor were kind enough to help me out.

Re: ASA 5508-X Missing ASDM

fbeye — Tue, 03 Apr 2018 07:30:20 GMT

I seem to be having the same problem, among possible other problems.

It seems I can not really even configure any aspects of my Router... Nor do my Management Port or 1/2 (LAN) Ports Light up.. They seem to be down by default where they are supposedly suppose to be up.

Does it appear I too am missing the ASDM?

> show flash:
--#-- --length-- -----date/time------ path
78 107035120 Mar 31 2017 14:45:06 os.img
79 33 Apr 02 2018 23:50:02 .boot_string
80 150474 Jun 22 2017 09:39:18 install.log
15 4096 Jun 22 2017 10:02:42 log
17 34183 Apr 02 2018 23:54:59 log/asa-appagent.log
21 4096 Jun 22 2017 10:03:32 crypto_archive
22 4096 Jun 22 2017 10:03:38 coredumpinfo
23 59 Jun 22 2017 10:03:38 coredumpinfo/coredump.cfg

7366520832 bytes total (7258775552 bytes free)

> show version
--------------------[ ciscoasa ]--------------------
Model : Cisco ASA5508-X Threat Defense (75) Version 6.2.0 (Build 363)
UUID : 1dce82f4-572f-11e7-a59d-98e725154532
Rules update version : 2016-11-29-001-vrt
VDB version : 271
----------------------------------------------------

Re: ASA 5508-X Missing ASDM

Rahul Govindan — Tue, 03 Apr 2018 13:39:33 GMT

You are running "Cisco ASA5508-X Threat Defense (75) Version 6.2.0 (Build 363)". This is different from the ASA operating system. This OS is managed by the local manager (Firepower Device Manager) or central manager (Firepower Management Centre).

Do a "configure manager local" and then if you go to https://<mgmt-ip>, it should take you to the local manager by default. No ASDM for Firepower threat defense devices.

If you want to the ASA OS, you would have to re-image this. Steps here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_57458

Re: ASA 5508-X Missing ASDM

fbeye — Tue, 03 Apr 2018 17:32:20 GMT

Thank you so much. Makes complete sense that my specific device is an FDM/FMC configuration and not the ASDM. I am fine not using ASDM I was just confused (ignorant) as to why it was not there.

What throws me off is as I say, neither GBit 1/2 or Management Ports are assigning a dynamic IP. Really by default they are supposed to.

GBit 1/2 doesn’t even bother to light up (probably in shutdown) but what is weird is Management lights (power and activity) on both the ASA and my Desktop are lit, but not receiving an IP!

So my only way in is Console which, as far as my ability goes, allows me to do nothing much.

Prior to your response, which is my next step, I did recall doing “show manager” and it showed local and also did “configure manager delete” and it stated DHCP is now shut down but whenever I did “show manager” it still said local.

I have not done “configure manager local” yet, though so maybe that is key.

I assume that then enables the access via Management.

I will give this a try when I get home and I thank you for the information.