topic Thank you for the replyI have in Network Security

ASA 5510 SSL SERVER/CLIENT VERSION PROBLEM WITH OPENING IN BROWSER

aleksandarsofranic — Fri, 21 Feb 2020 13:31:41 GMT

Hello i am wondering i cannot access my ASDM from my browser i had thought it was java, as it was at the end, so i downgraded it to version 6.

But because Java v6 doesn't allow me to use other programs i need to have an ASDM which can be used with java 8.

So i upgraded my asdm to asdm-731-101-1 and upgraded java but it doesn't work. I think what is make the problem is the connection configuration on the ASA itself which is as follows

Accept connections using SSLv3 and negotiate to SSLv3
Start connections using SSLv3 and negotiate to SSLv3
Enabled cipher order: aes128-sha1 aes256-sha1
Disabled ciphers: 3des-sha1 des-sha1 rc4-md5 rc4-sha1 null-sha1
No SSL trust-points configured
Certificate authentication is not enabled

Can this pose a problem with connection through the browser?

With regards

"No SSL trust-points

Marvin Rhoads — Mon, 13 Jul 2015 13:30:41 GMT

"No SSL trust-points configured"

You need to have at least the self-signed certificate setup. ASDM uses https under the covers and if the ASA does not have a trustpoint bound to an interface (i.e trustpoint), https will not be able to establish a secure session.

Thank you for the replyI have

aleksandarsofranic — Mon, 13 Jul 2015 13:35:16 GMT

Thank you for the reply

I have "No SSL trust-points configured" on another ASA and i can connect to this device with HTTPs.?

With regards

When you browse to the ASA

Marvin Rhoads — Mon, 13 Jul 2015 13:37:09 GMT

When you browse to the ASA (via https://<ASA address>/admin), what do you get?

This is what i get ERR_SSL

aleksandarsofranic — Mon, 13 Jul 2015 13:43:34 GMT

This is what i get

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

You should be able to connect

Marvin Rhoads — Mon, 13 Jul 2015 13:57:21 GMT

You should be able to connect using AES-256. I think the problem is your ASA is not negotiating to TLSv1 or greater and thus your browser is refusing the SSLv3-only setup you have.

Try this in config mode:

ssl server-version tlsv1.2

Thank you for the quick reply

aleksandarsofranic — Tue, 14 Jul 2015 07:59:19 GMT

Thank you for the quick reply. I will get back to you asap.

With regards