Cannot Access ASDM on Cisco 5506-X

[sjs2222]

Hello,

I cannot get ASDM to work on my ASA 5506-X. When accessing https://ipaddr/admin I get an error regarding unsupported ciphers/SSL or unsupported protocol. I have done troubleshooting according to this guide:

https://community.cisco.com/t5/security-documents/asdm-access-troubleshooting/ta-p/3122148

The license required for the strong ciphers is applied and I have tried several config changes using the 'ssl ciphers' and 'ssl encryption' command. I have attached the show run and show versions output to this post.

SJS

[mls577]

---

@sjs2222 wrote:

Hello,

I cannot get ASDM to work on my ASA 5506-X. When accessing https://ipaddr/admin I get an error regarding unsupported ciphers/SSL or unsupported protocol. I have done troubleshooting according to this guide:

https://community.cisco.com/t5/security-documents/asdm-access-troubleshooting/ta-p/3122148

The license required for the strong ciphers is applied and I have tried several config changes using the 'ssl ciphers' and 'ssl encryption' command. I have attached the show run and show versions output to this post.

SJS

---

Are you using an older OS / browser? You have tls 1.1 and fips ciphers enabled which could be an issue. Also, I'd try different browsers, they might not like the self signed certificate the ASA is using.

Also I'd add:

aaa authentication http console LOCAL

Also try manually specifying ASDM with its full name as it's shown in flash:

asdm image flash:fullasdmfilename

[venkat_n7]

Hi,

remove ssl commands for time being. and follow mls577 commands. you should be good.

[sjs2222]

Thanks for the suggestions, I have tried the below and still have the same result:

no ssl server-version tlsv1.1
no ssl client-version tlsv1.1
no ssl cipher tlsv1.1 fips

asdm image flash disk0:/asdm-761.bin

aaa authentication http console LOCAL

Do you have any other ideas? It's really strange because this firewall is new and I haven't done anything to it. I am really surprised it doesn't work straight out the box. 

[Marius Gunnerud]

What is the output of show run all ssl ?

[mls577]

---

@sjs2222 wrote:

Thanks for the suggestions, I have tried the below and still have the same result:

no ssl server-version tlsv1.1
no ssl client-version tlsv1.1
no ssl cipher tlsv1.1 fips

asdm image flash disk0:/asdm-761.bin

aaa authentication http console LOCAL

Do you have any other ideas? It's really strange because this firewall is new and I haven't done anything to it. I am really surprised it doesn't work straight out the box. 

---

At this point, I'm going to go with the issue either being asdm version or a client issue with your browsers. Have you tried different browsers? If that doesn't work, can you try uploading a newer asdm image to the asa?