Cannot connect to ASA using https

[bluemookie]

I'm trying to access my ASA 5505 by https://192.168.1.1 but I can't. I'm using Windows 7.  I already have installed ASDM and I can enter in the box by ASDM.  I am preparing to reformat my PC and I'm afraid that I won't be able to access my ASA if I do.

The Mozilla show the message:

An error occurred during a connection to 192.168.1.1.

Cannot communicate securely with peer: no common encryption algorithm(s).

(Error code: ssl_error_no_cypher_overlap)

Please bear in mind that I am a total noob.  Any help is greatly appreciated.

[Kureli Sankar · Accepted solution]

GUI - you are connected via GUI? That is ASDM.

It works?

You can have upto 5 asdm connections.  3 are taken - may be you can try from another computer and see if it works.

-KS

[Eric Woodman]

This solution worked perfectly for me. I suspect my problem arose because I enabled the http server before entering the activation key for 3des. Once enabling the other encryption options for ssl my SDM was fully functional.

Thanks!!

[mbcisco101]

Hi,

I am also new to this cisco asa 5505. I tried to reset it to factory default with the command config factory-default. Then when I tried to install ASDM or run ASM applet, run startup wizard applet. It won't launch, I used internet explorer , and on the internet explorer it shows certificate error. I'm confused if this is just a java compatibility problem or certificate problem. I am using windows 8.1 64 bit with latest java, my asdm version is 5.2. Any instructions on how I can fix and launch ASDM will be a great healp.

Thank you

Mark

[qi guo]

my ASA is ASA 5515; asdm is asdm-713.bin
we used to access asdm from our network management server, which is a Windows 2008.
recently, we found we cannot successfully go through the user password authentication.
We still can SSH to it using the same user/password
https:// IP address cannot access the asa page either.
Cisco expert, how to fix it?thanks

[bluemookie]

After that last step, setting the SSL encryption, I can now connect to my ASA using https!  Thank you!  What do I have to do to get rid of those established sessions?  Or do I not need to worry about it?

[Kureli Sankar · Accepted solution]

You can issue "clear conn all 192.168.1.21" from the CLI. That should remove those connections.

Issue the "sh asp table socket" command again to make sure.

Very glad to hear you are now able to connect.  Pls. conder making the thread as resolved.

-KS

[Cesar Alvarado]

This solution works perfectly... ASA5525X Version 9.0(4). Enabling the license for Encryption-3DES-AES, then enabling http server and finaly configuring "ssl encryption aes256-sha1 aes128-sha1 3des-sha1 des-sha1" solve my problem

Thanks

Cesar A.