topic Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520 in Network Security

Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Mike Baker — Mon, 11 Mar 2019 19:35:30 GMT

Hello. I am trying to get where I can get into either the FWSM or the ASA from ASDM, but after

I log into the ASA 5520, ASDM fails to log into the FWSM with the error "Your FWSM image has a version number 4.0(2) which is not supported by ASDM. Please use Device Manager version 6.1(x)F". I don't install ASDM launcher, I always do an HTTPS to the firewall and say Run ASDM, and it creates an icon on my desktop that I can re-use to login to the ASDM for the ASA, but it only works once for the FWSM, once I get into the ASA, then I get the error message. CLI works fine for each, but some things are easier to do in ASDM. Any help would be greatly appreciated. Mike Baker

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Allen P Chen — Sat, 15 Jan 2011 00:02:11 GMT

What version of ASDM is installed on the ASA, and what version of ASDM is installed on the FWSM? You should be able to see this with the "show version" output from the CLI.

Thanks.

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Kureli Sankar — Sat, 15 Jan 2011 02:30:40 GMT

I believe you are running into this known issue: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsv21256

Symptom:

ASDM 6.1(1)F may throw an error message while loading the applet. You may see this message below:

Your FWSM image has a version number 4.0(2) which is not supported by ASDM. Please use Device Manger version 6.1(x)F

Conditions:

This was fist observed on an FWSM running 4.0.2 and ASDM 6.1(1)F multiple context. FWSM 3.1.12 and ASDM 6.1(1)F also exhibits the same issue.

Workaround:

The launcher will create a cache file in the following location C:\Documents and Settings\\.asdm\cache

One can delete the files in the cache folder and retry.

Further Problem Description:

Java - Version 6 Update 7 (build 1.6.0_07-b06) - exhibits the problem.
Java - Version 1.5.0 (build 1.5.0-b64) works fine consistently

Upgrade the ASDM image on the FWSM to the latest. You can download it here:

http://www.cisco.com/cgi-bin/tablebuild.pl/cat6000-fwsm
ASDM is asdm-62(1)f.bin

-KS

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Mike Baker — Mon, 17 Jan 2011 20:56:41 GMT

The ASA 5520 is using ASA version 8.2(3) and Device manager version 6.3(4)53. The FWSM is using FWSM version 4.0(2) and Device manager 6.1(1)F.

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Mike Baker — Mon, 17 Jan 2011 20:59:32 GMT

I did delete the files from the C:\Documents and Settings\\.asdm\cache and it did let me back in one time. I will look at the documentation on how to upgrade the ASDM on the FWSM and npt take everything down.

Mike Baker

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Kureli Sankar — Mon, 17 Jan 2011 22:21:21 GMT

Upgradeing asdm is not service impacting. All you need is a tftp server and connectivity to the fwsm.

copy tftp flash:asdm

That is the only command that you need and follow the prompts.

-KS

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Mike Baker — Mon, 17 Jan 2011 22:33:44 GMT

Thank you. Can I ask another question? Not sure if it would be handled in this part of the forum. I need to allow ports for windows 2008 server that is on a domain and I need those ports so the domain/active directory functions will be happy when the server is on a vlan where the domain controllers are not. Does the ASDM have port "bundles" that I can pick for tcp and udp, or do i need to know ALL the exact ports and put rules in for each port (checkpoint firewall had pre-defined bundles based on what you were trying to do, which was really nice) I know I need to get ASDM manual and look.

Re: Can't get into ASDM on 6500 FWSM after ASDM on ASA 5520

Kureli Sankar — Mon, 17 Jan 2011 22:37:53 GMT

Hmm..Good question. I don't use ASDM do, I am not sure. I do know that CSM have these pre-built services that have ports bundled in them.

Doesn't look like it is there: http://www.cisco.com/en/US/docs/security/asa/asa83/asdm63/configuration_guide/acl_manager.html

-KS