topic asdm from outside in Network Security

asdm from outside

erikgrissom — Mon, 11 Mar 2019 21:29:31 GMT

Hi.

im working on a small project on a asa 5505 and beacuse i do most of the work from the outside

i want to open up asdm without vpn.

i tried to add asdm access

http 0.0.0.0 0.0.0.0 outside but i does not work 😞

i have it working on another asa and the only difference is the rom version.

the one not working is 8.0(5) - 6.2(3)

and the one working is 8.0(4) - 6.1(5)

did they do some changes?

//:Erik

asdm from outside

varrao — Fri, 23 Sep 2011 21:32:14 GMT

A couple of things that you might need to check:

1 . The output of shoqw run http, check if http server is enale on port 443 only oer on some other port.

2. Check java version on your computer.

3. Check the output of "show run asdm", it should point towards the asdm image that you are using.

4. Check if you are using any proxy server on the host machine.

Thanks,

Varun

asdm from outside

Kureli Sankar — Sat, 24 Sep 2011 02:31:08 GMT

Erik,

Pls. check this link and run through the check list.

https://supportforums.cisco.com/docs/DOC-13012

-KS

asdm from outside

erikgrissom — Mon, 26 Sep 2011 15:39:27 GMT

and thanks for all the replyes.

after a lot of trial and error it seems that webvpn and no access rules can be in the config for asdm outside

to work. i have now confirmed this with 2 separate asa. the only thing that is still bad about this is that

if you are running for example a exchange server on the inside and are using OWA this will not work beacuse of the

access rules.

is there a way to change the port for the asdm accessing from the outside, from inside it works fine to change the port.

//:Erik

asdm from outside

varrao — Mon, 26 Sep 2011 15:44:56 GMT

Hi Erik,

If you want to change the port for ASDM access, you might do it by:

http server enable 8443

This would change the port for accessing the ASDM from any interface on 8443 only, but be mindful that now, in the browser you would need to type this url:

https://:8443

eq:

https://10.1.1.1:8443

Thanks,

Varun

asdm from outside

erikgrissom — Mon, 26 Sep 2011 16:03:02 GMT

Hmmm thats strange got it to work now, i did that 20 min ago and change the asdm to port 445 and it worked from inside 1.1.1.1:445 but when i tried it from a outside computer with the outside ip:445 it did not work?

well im just happy i got it working.

Thanks

//:Erik

asdm from outside

varrao — Mon, 26 Sep 2011 16:57:26 GMT

Thats good you got it working

Varun