topic Re: Unable to access inside ASDM on PIX in Network Security

Unable to access inside ASDM on PIX

epohxavrio — Fri, 21 Feb 2020 11:10:02 GMT

Hi all:

I cannot access the ASDM on the PIX when I type in

Any advice would be appreciated.

Re: Unable to access inside ASDM on PIX

JORGE RODRIGUEZ — Mon, 15 Dec 2008 18:15:27 GMT

You need

asa(config)#aaa authentication ssh console LOCAL

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008069bf1b.shtml

Regards

Re: Unable to access inside ASDM on PIX

epohxavrio — Mon, 15 Dec 2008 18:38:54 GMT

I put that in:

aaa authentication ssh console LOCAL

Range already exists.

So i removed it and put it back in.

Same thing, it just tries to load, but never does.

Re: Unable to access inside ASDM on PIX

jbalchunas — Mon, 15 Dec 2008 19:34:06 GMT

What do you mean by the page tried to load? Are you prompted for credentials and they don't work? Are you prompted for credentials, they work but the ASDM times out when loading?

One thing to look at is if your Java version got updated automatically. ASDM 6.1(3) does not play well with the latest version of JRE. The latest version it will work with is Java 6 Update 7.

Re: Unable to access inside ASDM on PIX

epohxavrio — Mon, 15 Dec 2008 19:40:02 GMT

No I am not prompted at all for credentials, the page just keeps showing that is loading but never does, no content ever appears. I checked the version of Java I have two:

1.6.0 update 1

1.6.0 update 10

Re: Unable to access inside ASDM on PIX

epohxavrio — Mon, 15 Dec 2008 21:03:41 GMT

I also tested this from another computer that only had Java 1.6 update 7

It didn't work either.

Re: Unable to access inside ASDM on PIX

don.click1 — Tue, 16 Dec 2008 00:35:51 GMT

are you using https:///admin or just https:// ?

for us, if you dont add the /admin, you get the SSL WebVPN login page.

just a thought.

Re: Unable to access inside ASDM on PIX

epohxavrio — Tue, 16 Dec 2008 13:35:33 GMT

That does not work either.

Re: Unable to access inside ASDM on PIX

jbalchunas — Tue, 16 Dec 2008 16:37:15 GMT

Using the following command, we are prompted for username/password when connecting via ASDM.

aaa authentication serial console TACACS+ LOCAL

I know it seems counter-intuitive with the serial command, but I can change what account is authorized to access ASDM by adding/removing our TACACS+ config. If you simply use:

aaa authentication serial console LOCAL

you should be prompted for your local admin account.

Re: Unable to access inside ASDM on PIX

CDawe — Wed, 17 Dec 2008 08:09:31 GMT

Hi,

You are specifying two particular IP addresses as being allowed from the inside network. Just a thought, are you sure, that the PC's you are using to access the PIX are having the correct IP addresses?

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 13:59:30 GMT

Yes, they are the correct IP addresses.

I thought it was something simple, but I might have to get TAC involved.

Re: Unable to access inside ASDM on PIX

JORGE RODRIGUEZ — Wed, 17 Dec 2008 17:44:36 GMT

I cannot access the ASDM on the PIX when I type in "https://" & PIX_inside_IP

I had no problem accessing the ASDM until I added the user admin to the config. I tried to login once, and I have never been able to access the ASDM again.

I tested using admin as you and worked fine, could you use different user name with privilege 15 instead of admin to atleast narrow down this issue.

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 17:57:09 GMT

Well actually admin is not the actual username.

But I can't even get to the page that show run as asdm or java app, the page never finishes loading (no html content is displayed)

Re: Unable to access inside ASDM on PIX

JORGE RODRIGUEZ — Wed, 17 Dec 2008 18:14:15 GMT

ok, have you try accessing it from a different machine as it seems to me that something may have changed either from the PC or asa firewall beside creating username.

can you from the machine do a telnet test to rule out secure port connectivity issue.

from the PC you are accessing firewall inside ip can you do a telnet test on port 443

c:\telnet 443

if you get black screen http services on fw issues is ruled out.

can you then try access from a different PC and see results, at least we can say it is the machine you are accessing the fw from.

Also you did not mention if you can telnet to firewall, can you telnet at all using the username you create?

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 18:50:59 GMT

RE telnet test on port 443:

Yes just the black screen

RE Telnet to f/w using username I created:

Yes, I can I just tested that per your recommendation (good idea)

I power cycled the PIX and I was able to access the main again (progress)

I am getting an error message now. I will put a screen shot up in a minute.

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 18:58:13 GMT

I get an error message:

ASDM cannot be loaded. Click OK to exit ASDM.

Unconnected sockets not implemented.

Re: Unable to access inside ASDM on PIX

JORGE RODRIGUEZ — Wed, 17 Dec 2008 18:59:59 GMT

Ive seen this error in netpro like 100 times, this is java update 10 downgrade java to update 7 I think but let me verify.

[edit]

Try this solution

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40.2cc289e0/5#selected_message

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 19:23:29 GMT

I already installed that, how do I force ASDM to use the older version of Java?

Re: Unable to access inside ASDM on PIX

JORGE RODRIGUEZ — Wed, 17 Dec 2008 19:34:02 GMT

ok what version of code are you running now?

post output of show version

Re: Unable to access inside ASDM on PIX

epohxavrio — Wed, 17 Dec 2008 19:54:21 GMT

Cisco PIX Security Appliance Software Version 8.0(4)

Device Manager Version 6.1(3)

Compiled on Thu 07-Aug-08 19:42 by builders

System image file is "flash:/pix804.bin"

Config file at boot was "startup-config"

PIX515E up 2 hours

Hardware: PIX-515E, 128 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0xfff00000, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: Ext: Ethernet0 : address is 0013.60b8.f2ca, irq 10

1: Ext: Ethernet1 : address is 0013.60b8.f2cb, irq 11

2: Ext: Ethernet2 : address is 000e.0c6e.8b04, irq 11

Licensed features for this platform:

Maximum Physical Interfaces : 3

Maximum VLANs : 10

Inside Hosts : Unlimited

Failover : Disabled

VPN-DES : Enabled

VPN-3DES-AES : Enabled

Cut-through Proxy : Enabled

Guards : Enabled

URL Filtering : Enabled

Security Contexts : 0

GTP/GPRS : Disabled

VPN Peers : Unlimited

This platform has a Restricted (R) license.

Serial Number:

Running Activation Key: xxxxxxxxxxxxxxxxxx

Configuration last modified by user_15 at 05:04:53.232 CST Wed Dec 17 2008