topic Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK in Network Security

ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

ciscoprolin — Mon, 06 May 2019 08:39:07 GMT

Hi,

can the Cisco ASDM Launcher for accessing the ASA only be used with the Oracle JRE ? Since the latest Oracle JREs are no longer free we're wondering if you can use another JAVA JRE such as Zulu or OpenJDK to use the Cisco ASDM launcher.

Is that possible ? If yes how can this be done best ?

What's your recommended non-Oracle JRE ?

Thanks,

Thorsten

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

balaji.bandi — Mon, 06 May 2019 08:55:59 GMT

Not sure what is the version of ASA code you using here. JRE is free from (Oracle) - until you are referring any new version.

check the release notes, (Not that i aware or testing with differnt JVM from other vendors)

https://www.cisco.com/c/en/us/td/docs/security/asdm/7_8/release/notes/rn78.html#id_25469

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

ciscoprolin — Mon, 06 May 2019 09:08:08 GMT

Thanks for your reply. Sooner or later it might become necessary to update the Oracle JRE to a later version because of many security issues. Our Security departmented decided we have to upgrade to Java 8 Update 211 which is not available for free.

So either we're purchasing this Oracle JRE or try to look for a free alternative.

Thanks

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

balaji.bandi — Mon, 06 May 2019 10:50:04 GMT

Do you see Java 8 Update 211 this version is compatability with your ASDM ?

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

ciscoprolin — Mon, 06 May 2019 10:56:10 GMT

Hi Balaji,

the only thing I see in the Release Notes is that JAVA SE Plug-in 8.0 is supported. But my question is if it's possible to use another JRE other than Oracle ?

And BTW: yes my colleague was able to get ASDM to run with JAVA 8, Update 211 (no matter it it's supported or not) and we have no choice to use an older JAVA version for Security reasons.

Cheers,

Thorsten

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

balaji.bandi — Mon, 06 May 2019 11:50:28 GMT

(Not that i aware or testing with differnt JVM from other vendors)

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

bpersonick — Tue, 30 Jul 2019 17:00:12 GMT

Cisco Released an OpenJRE version of ASDM in the most recent release of the ASDM software ( ASDM 7.12.2 ) on May 29th 2019.

You can find that in your Support and downloads section, here is a direct link:

https://software.cisco.com/download/home/279513399/type/280775064/release/7.12.2

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

ziqex — Mon, 09 Dec 2019 15:35:36 GMT

I will upgrading from the 7.9.(1) to the ASDM 7.12.2.
Should I upgrade to asdm-7122.bin or asdm-openjre-7122.bin?
Thank you.

EDIT 09/12/2019

I have upgraded the image to:

Device Manager image file, disk0:/asdm-openjre-7122.bin

As oracle has changed their licencing model and it's no longer free unless for personal use.

Upgrade was successful not issues noted for this image asdm-openjre-7122.bin on ASA5545.

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

bpersonick — Tue, 10 Dec 2019 22:44:08 GMT

We've switched to openjre-7122, works slightly better in my experience

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

kenichinishida17743 — Mon, 10 Feb 2020 04:57:00 GMT

Re: ASDM Launcher non Oracle JAVA JRE such as Zulu or OpenJDK

TomArner — Fri, 08 Dec 2023 16:01:37 GMT

I was wondering if this is still an option and if there have been updates, we are a small company but need to migrate Sun (oracle) JAVA? It was stated that "We've switched to openjre-7122, works slightly better in my experience" Is this still practical our ASA hardware is not going anywhere anytime soon. Thanks in advance!