topic Got different version of ASDM and can't work from the same Firewall in Network Security

Got different version of ASDM and can't work from the same Firewall

Jerry.Lv2016 — Sat, 22 Feb 2020 07:28:28 GMT

We have a ASA firewall with ASDM 649.bin,and my colleague got version 1.7(56) from it several days ago and works fine.

But I got version 1.5(56) from the same firewall and can't manage the firewall,always prompt that unable to launch device manager from my IP address.Is it in relation to the authority of my AD account when login my laptop,my AD account don't have full admin permission.

Does anyone had met the same case or has any ideas about this?

Thanks.

"Unable to launch" issues

Marvin Rhoads — Tue, 31 May 2016 12:39:53 GMT

"Unable to launch" issues almost always result from Java security or ASDM file (on the ASA) issues.

Since it works for another user, the file issue is probably not the case.

Can you provide the output from ASA command line of "show run asdm", "show run ssl" and "show run http"?

Is it a normal situation that

Jerry.Lv2016 — Wed, 01 Jun 2016 08:45:11 GMT

Is it a normal situation that me and my colleague got different version of ASDM from the same ASA?

I had check the version of Java before, my version is newer than my colleague,and I tried a few version,but can't launch too.

show information you mentioned as below:

show run asdm
asdm image disk0:/asdm-649-103.bin
no asdm history enable

show run ssl
ssl encryption aes128-sha1 aes256-sha1 3des-sha1 dhe-aes128-sha1 dhe-aes256-sha1
ssl trust-point SSL_VPN_2014
ssl trust-point SSL_VPN_2015 Outside vpnlb-ip
ssl trust-point SSL_VPN_2016 Outside

show run http
http server enable
http 0.0.0.0 0.0.0.0 Inside
http 192.0.111.0 255.0.255.0 Inside

That's really odd that you

Marvin Rhoads — Thu, 02 Jun 2016 02:36:44 GMT

That's really odd that you would get different launcher versions. I'd suspect your colleague already had launcher installed previously as the ASDM 6.4(9) is quite old and would include the 1.5(x) launcher and not 1.7(x).

Your output looks in order. I'd do a packet capture on the PC that's not working and see if I could find the issue. Alternatively, I'd open a Java console and watch it while you try to launch ASDM.

Hi

Jerry.Lv2016 — Wed, 14 Dec 2016 03:25:27 GMT

Since your last reply 7 months ago, I did nothing and shelved it.

But when I tried to login ASA using ASDM 2 months ago, it works fine.

Unfortunately, when I tried to use ASDM, the same error happened again.

I know it has been longtime ago,could you please help to diagnose

this issue?

Attach the Java console.

Thanks a lot.

Try lowering your Java

Marvin Rhoads — Wed, 14 Dec 2016 03:35:54 GMT

Try lowering your Java security levels from "Very High" to "High" in the Java control panel applet.

Whenever you update Java, be sure NOT to accept the prompt to "Restore Java security levels".

Thanks.

Jerry.Lv2016 — Wed, 14 Dec 2016 05:53:24 GMT

Thanks.

The security level used to be "high",but it didn;t work.

Please see the attachment.

Can you perhaps install the

Marvin Rhoads — Wed, 14 Dec 2016 07:34:43 GMT

Can you perhaps install the current ASDM version on the ASA? ASDM 7.6(2) is compatible with any ASA running ASA software version 8.0 or later.

http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#48552

If not, you can also try adding your ASA address in your Java "exception site list" as described here:

https://java.com/en/download/faq/exception_sitelist.xml