topic Application error - Unable to launch the application in Network Security

Application error - Unable to launch the application

Ramkumar P — Tue, 12 Mar 2019 00:08:48 GMT

Hi,

I have an ASA with three different asdm's loaded on the flash, running on 8.32-k8.bin ios.

asdm-634.bin

asdm-645.bin

asdm-649-103.bin

When i try opening via ASDM, it throughs the error " Unable to launch the application "

I have the below commands configured in asa,

http server enable

http 10.0.0.0 255.0.0.0 inside

asdm image disk0:/asdm-645.bin

Current BOOT variable = disk0:/asa832-k8.bin;disk0:/asa823-k8.bin

Please see the debug info when i tried login,

bej5505fw01# HTTP: processing handoff to legacy admin server [/]

HTTP: session verified = [0]

HTTP: processing GET URL '/' from host 10.103.154.213

HTTP: redirecting to: /admin/public/index.html

HTTP: session verified = [0]

HTTP: processing GET URL '/admin/public/index.html' from host 10.103.154.213

HTTP: authentication not required

HTTP: sending file: public/index.html, length: 6725

HTTP: session verified = [0]

HTTP: processing GET URL '/admin/public/cisco.gif' from host 10.103.154.213

HTTP: authentication not required

HTTP: file not modified: public/cisco.gif

HTTP: session verified = [0]

HTTP: processing GET URL '/admin/public/asa-pix.gif' from host 10.103.154.213

HTTP: authentication not required

HTTP: file not modified: public/asa-pix.gif

HTTP: session verified = [0]

HTTP: processing GET URL '/admin/public/asdm.jnlp' from host 10.103.154.213

HTTP: authentication not required

HTTP: sending file: public/asdm.jnlp, length: 1441 bej5505fw01# HTTP: processing handoff to legacy admin server [/]
HTTP: session verified = [0]
HTTP: processing GET URL '/' from host 10.103.154.213
HTTP: redirecting to: /admin/public/index.html
HTTP: session verified = [0]
HTTP: processing GET URL '/admin/public/index.html' from host 10.103.154.213
HTTP: authentication not required
HTTP: sending file: public/index.html, length: 6725
HTTP: session verified = [0]
HTTP: processing GET URL '/admin/public/cisco.gif' from host 10.103.154.213
HTTP: authentication not required
HTTP: file not modified: public/cisco.gif
HTTP: session verified = [0]
HTTP: processing GET URL '/admin/public/asa-pix.gif' from host 10.103.154.213
HTTP: authentication not required
HTTP: file not modified: public/asa-pix.gif
HTTP: session verified = [0]
HTTP: processing GET URL '/admin/public/asdm.jnlp' from host 10.103.154.213
HTTP: authentication not required
HTTP: sending file: public/asdm.jnlp, length: 1441

From the PC i have cleared the cache, SSL cert, cookies and history. but still no luck. Can anyone please help me on this ?

Application error - Unable to launch the application

Julio Carvajal — Mon, 15 Oct 2012 17:49:13 GMT

Hello,

What is the java version you are running on the PC?

Can you do the following as well

cap asp type asp drop all circular-bruffer

then try to connect and provide:

show cap asp | include 10.103.154.213

Any other question..Sure..Just remember to rate all the helpful posts.

Regards,

Julio

Application error - Unable to launch the application

Ramkumar P — Tue, 16 Oct 2012 06:04:02 GMT

Hi Julio,

Thanks for the reply. I was using Java 5 and recently upgraded to 7 because of this issue.

It is not prompting for username and password, It throws the error before that "unable to load application"

As requested, Please see the below capture.

bej5505fw01(config)# show cap asp | include 10.103.154.213

586: 05:58:08.614287 802.1Q vlan#1 P0 10.103.154.213.3883 > 10.102.48.2.443: F 3020129898:3020129898(0) ack 3841894189 win 65528

Cheers

Ram

Application error - Unable to launch the application

Julio Carvajal — Tue, 16 Oct 2012 12:12:02 GMT

Hello,

So you had the issue while ussing java 5??? Is that correct? Are you 100 % sure of that??

I am asking that because there are known issues with ASDM while using java version 7.

Can you provide me the following:

show run ssl

Any other question..Sure..Just remember to rate all the helpful posts.

Application error - Unable to launch the application

Ramkumar P — Tue, 16 Oct 2012 12:24:39 GMT

Hi,

Yes, I had issues while using Java 5. So i updated it to version 7.

bej5505fw01# sh run ssl

ssl encryption des-sha1

Application error - Unable to launch the application

Julio Carvajal — Tue, 16 Oct 2012 12:26:10 GMT

Hello Ramkumar,

Okay...

Do the following for me:

Show version and provide me the output

We are getting closer already know what is the issue

Regards,

Julio

Application error - Unable to launch the application

Ramkumar P — Tue, 16 Oct 2012 12:28:03 GMT

Here you go...

bej5505fw01# sh ver

Cisco Adaptive Security Appliance Software Version 8.3(2)

Device Manager Version 6.4(5)

Compiled on Fri 30-Jul-10 17:49 by builders

System image file is "disk0:/asa832-k8.bin"

Config file at boot was "startup-config"

bej5505fw01 up 4 days 1 hour

Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz

Internal ATA Compact Flash, 128MB

BIOS Flash M50FW080 @ 0xfff00000, 1024KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)

Boot microcode : CN1000-MC-BOOT-2.00

SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03

IPSec microcode : CNlite-MC-IPSECm-MAIN-2.06

0: Int: Internal-Data0/0 : address is 0023.33cd.ffcb, irq 11

1: Ext: Ethernet0/0 : address is 0023.33cd.ffc3, irq 255

2: Ext: Ethernet0/1 : address is 0023.33cd.ffc4, irq 255

3: Ext: Ethernet0/2 : address is 0023.33cd.ffc5, irq 255

4: Ext: Ethernet0/3 : address is 0023.33cd.ffc6, irq 255

5: Ext: Ethernet0/4 : address is 0023.33cd.ffc7, irq 255

6: Ext: Ethernet0/5 : address is 0023.33cd.ffc8, irq 255

7: Ext: Ethernet0/6 : address is 0023.33cd.ffc9, irq 255

8: Ext: Ethernet0/7 : address is 0023.33cd.ffca, irq 255

9: Int: Internal-Data0/1 : address is 0000.0003.0002, irq 255

10: Int: Not used : irq 255

11: Int: Not used : irq 255

Licensed features for this platform:

Maximum Physical Interfaces : 8 perpetual

VLANs : 3 DMZ Restricted

Dual ISPs : Disabled perpetual

VLAN Trunk Ports : 0 perpetual

Inside Hosts : Unlimited perpetual

Failover : Disabled perpetual

VPN-DES : Enabled perpetual

VPN-3DES-AES : Enabled perpetual

SSL VPN Peers : 2 perpetual

Total VPN Peers : 10 perpetual

Shared License : Disabled perpetual

AnyConnect for Mobile : Disabled perpetual

AnyConnect for Cisco VPN Phone : Disabled perpetual

AnyConnect Essentials : Disabled perpetual

Advanced Endpoint Assessment : Disabled perpetual

UC Phone Proxy Sessions : 2 perpetual

Total UC Proxy Sessions : 2 perpetual

Botnet Traffic Filter : Enabled 460 days

Intercompany Media Engine : Disabled perpetual

This platform has a Base license.

Serial Number: JMX1245Z1TF

Running Permanent Activation Key: 0x173ccb69 0x4cf555d3 0x10230dcc 0xb6a8580c 0x8f0616bb

Running Timebased Activation Key: 0x3a1bf4e2 0xa175ee9d 0x25bb0a5f 0xe7dff0cb 0xc3b50abe

Configuration register is 0x1

Configuration last modified by hartmannj at 07:05:48.057 UTC Mon Oct 15 2012

Application error - Unable to launch the application

Julio Carvajal — Tue, 16 Oct 2012 12:37:25 GMT

Hello,

Good,

Now do the following

ssl encryption aes256-sha1 des-sha1 3des-sha1

Then give it a try

Remember to rate all of the support answers, this is why we are here.. Just mark the stars on the bottom of each answer.

Regards,

Application error - Unable to launch the application

Ramkumar P — Tue, 16 Oct 2012 12:44:37 GMT

You are the MAN...

It is working now, how did you identify the issue ?

Application error - Unable to launch the application

Julio Carvajal — Tue, 16 Oct 2012 12:49:28 GMT

Hello Ramkumar,

Long time working on cases like this

With issues like this I start with the basics:

- Check the ASDM image is in flash

-Check the http server service on the asa is enabled for the right subnets

-Check the java version

-Check the ssl encryption algorithm used by the asa ( and here is where your problem was, as you were using a poor encryption algorithm different from what the client was trying to use, so as soon as we changed the client and server were able to negotiate and maintain the TLS/SSL session)

Hope this helps,

Julio

Application error - Unable to launch the application

Ramkumar P — Tue, 16 Oct 2012 12:53:32 GMT

Great, Thanks a lot Julio.

Do Keep in touch, my Facebook ID ramuccna@gmail.com if interested just send an invite.

Thanks for your time mate.

Cheers

Ram

Application error - Unable to launch the application

Julio Carvajal — Tue, 16 Oct 2012 13:03:20 GMT

Hello,

Sure, my pleasure

Regards

Hi Julio: I am having the

IKRAM HUSSAIN — Thu, 13 Mar 2014 20:19:13 GMT

Hi Julio:

I am having the same issue, but after running the command ssl encryption aes256-sha1 des-sha1 3des-sha1, it didn't fix my issue.

I did debug http, and it gives me the following message:

sec/act(config)# listen: Received HTTP request.
Started http listen on interface MGMT port 443
HTTP: processing GET URL '/admin/public/index.html' from host 10.1.16.255
HTTP: authentication not required
HTTP: file not found: public/index.html

Any help is appreciated.

Fixed my issue too. I had

3gleister — Fri, 10 Apr 2015 20:05:24 GMT

Fixed my issue too. I had recently removed an old certificate and added a new one and during the process it added the line " SSL encryption aes256-sha1", which wasn't there before. After adding the full line "ssl encryption aes256-sha1 des-sha1 3des-sha1" it worked. Thanks! 2 hours spent trying to figure out the problem.

Re: Fixed my issue too. I had

Pedro Vieira — Sun, 27 Aug 2017 06:03:01 GMT

Hello Everyone.

I'm experiencing a similar issue. After configured a failover with 2 5505, I've lost access to both ASA's through SSH and ASDM.

I only have access to the primary via telnet.

I have no idea on how to solve this, I've tryied to do the steps shown here, but it didn't work.

Thank you!

Re: Fixed my issue too. I had

Marvin Rhoads — Sun, 27 Aug 2017 06:31:02 GMT

If telnet is working but not ssh or ASDM, you most likely don't have a working rsa key. Try generating a new key and see if that helps.

conf t

cry key gen rsa mod 2048

end

Re: Fixed my issue too. I had

Pedro Vieira — Mon, 28 Aug 2017 13:44:41 GMT

Hello Marvin, Thank you for your quick reply

I did it and didn't work.

I have no idea on how to solve this issue

Re: Fixed my issue too. I had

Marvin Rhoads — Mon, 28 Aug 2017 14:26:04 GMT

Please share the output of the following:

show ver | i 3DES

It could be that your failover unit is lacking the right license and when it became active the access via ssh and ASDM (https) does not find the required 3DES-AES license to establish cryptographically secured communications

Re: Fixed my issue too. I had

Pedro Vieira — Mon, 28 Aug 2017 15:18:41 GMT

Hello,

Here is the output

show ver | i 3DES

Encryption-3DES-AES : Enabled perpetual
Encryption-3DES-AES : Enabled perpetual

Re: Fixed my issue too. I had

Marvin Rhoads — Mon, 28 Aug 2017 16:38:07 GMT

Hmm the license is in order.

What exactly happens when you try to connect? Are you able to browse to the ASA admin page?

Can you grab a packet capture (e.g with Wireshark) of a connection attempt?

If you are in via console, please check:

show asp table socket

...to confirm the ASA is listening on tcp/22 and tcp/443 for ssh and ASDM respecitvely.