As risseth posted and Vibhor

munzeljmm · ‎05-26-2015

I am in the process of configuring an ASA 5508-X. I have been following the quick start guide, but can't seem to get to the ASDM software. I am referencing it at http://192.168.1.1/ per the instructions but am getting an error that the path "/admin/public/index.html" cannot be found, instead of the links to download the software. I know I am connecting to the ASA or I wouldn't be getting redirected. When I do a "show flash" in the console I don't see any reference to any ASDM files. Am I missing something, is the device missing software, or what is up? I don't currently have a support contract and while I'm not opposed to getting one, I would like to see the device work before I spend that extra money. I would think the basic out of the box functionality should just work, no support necessary.

Can anyone point me in the right direction of where to go next?

johnlloyd_13 · ‎05-26-2015

hi,

did you connect your PC to the management port (MGMT)?

have you tried HTTPS? https://192.168.1.1

munzeljmm · ‎05-27-2015

Yes, I did try connecting directly to the management port as well, but the instructions advise to plug both the management port and GigabitEthernet1/2 into a switch, along with the PC of course, so that is the configuration I have been working with the most. Good catch on the https, that was a typo on my part, I have been using it all along.

Any other ideas?

johnlloyd_13 · ‎05-27-2015

hi,

kindly post show version and show flash output.

munzeljmm · ‎05-27-2015

Cisco Adaptive Security Appliance Software Version 9.4(1)

Compiled on Sat 21-Mar-15 11:42 PDT by builders
System image file is "disk0:/asa941-lfbff-k8.SPA"
Config file at boot was "startup-config"

ciscoasa up 1 min 13 secs

Hardware: ASA5508, 8192 MB RAM, CPU Atom C2000 series 2000 MHz, 1 CPU (8 cores)
Internal ATA Compact Flash, 8192MB
BIOS Flash unknown @ 0x0, 0KB

Encryption hardware device : Cisco ASA Crypto on-board accelerator (revision 0x1)
Number of accelerators: 1

1: Ext: GigabitEthernet1/1 : address is 84b8.0276.fa26, irq 255
2: Ext: GigabitEthernet1/2 : address is 84b8.0276.fa27, irq 255
3: Ext: GigabitEthernet1/3 : address is 84b8.0276.fa28, irq 255
4: Ext: GigabitEthernet1/4 : address is 84b8.0276.fa29, irq 255
5: Ext: GigabitEthernet1/5 : address is 84b8.0276.fa2a, irq 255
6: Ext: GigabitEthernet1/6 : address is 84b8.0276.fa2b, irq 255
7: Ext: GigabitEthernet1/7 : address is 84b8.0276.fa2c, irq 255
8: Ext: GigabitEthernet1/8 : address is 84b8.0276.fa2d, irq 255
9: Int: Internal-Data1/1    : address is 84b8.0276.fa25, irq 255
<--- More --->

10: Int: Internal-Data1/2    : address is 0000.0001.0002, irq 0
11: Int: Internal-Control1/1 : address is 0000.0001.0001, irq 0
12: Int: Internal-Data1/3    : address is 0000.0001.0003, irq 0
13: Ext: Management1/1       : address is 84b8.0276.fa25, irq 0

Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 50             perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
Encryption-DES                    : Enabled        perpetual
Encryption-3DES-AES               : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 4              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 100            perpetual
Total VPN Peers                   : 100            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
Total UC Proxy Sessions           : 320            perpetual
Botnet Traffic Filter             : Enabled        perpetual
<--- More --->

Cluster                           : Disabled       perpetual
VPN Load Balancing                : Enabled        perpetual

Serial Number: [removed]
Running Permanent Activation Key: [removed]
Configuration register is 0x1
Image type : Release
Key Version : A
Configuration has not been modified since last system restart.

ciscoasa# sh vershow flash
--#-- --length-- -----date/time------ path
   93 69454656    May 02 2015 10:47:44 asa941-lfbff-k8.SPA
   94 33          May 26 2015 18:08:14 .boot_string
   11 4096        May 02 2015 10:50:36 log
   20 4096        May 02 2015 10:51:42 crypto_archive
   21 4096        May 02 2015 10:52:00 coredumpinfo
   22 59          May 02 2015 10:52:00 coredumpinfo/coredump.cfg
   95 41836544    May 02 2015 10:57:14 asasfr-5500x-boot-5.4.1-211.img

7934787584 bytes total (4600188928 bytes free)

johnlloyd_13 · ‎05-27-2015

hi,

you're missing the ASDM image that's why you're not able to GUI into it.

download ASDM 7.4(2) and follow link below:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/upgrade/upgrade94.html#69905

munzeljmm · ‎05-28-2015

Thanks for the help. Is there any way to download the ASDM without a support contract? I have an account with Cisco but do not have the necessary permissions to download the ASDM.

If you truly need a support contract... it seems pretty sad that you essentially can't use a product unless you also buy a support contract for it.

Rene Elgaard · ‎08-11-2015

I am in the same situation: Received a new 5508 and no ADSM image is present on the flash.

I'd like to know who's side the error is on: me or Cisco?

I would expect a ADSM image present on a new ASA.

Vibhor Amrodia · ‎08-11-2015

Hi,

Yes , we have seen some issues with the same problem.

We are working on it.

Thanks and Regards,

Vibhor Amrodia

TekNecksLLC · ‎09-18-2015

C'mon, what kind of response is that? We are working on it... Thanks.

Let the guy download the ASDM without a support contract. After all, Cisco should have put it there in the first place...

I have two ASA5516X's with the exact same issue. No ASDM image. Fortunately, I do have a contract on my devices, so I should be able to put Humpty Dumpty back together again.

Rishabh Seth · ‎09-18-2015

https://tools.cisco.com/bugsearch/bug/CSCuv96789/?referring_site=bugquickviewredir

Marvin Rhoads · ‎09-19-2015

As risseth posted and Vibhor alluded to, this is a known manufacturing defect. Cisco has fixed the root cause but units in the delivery channel may still turn up.

If you get a unit affected my a manufacturing defect (or a security advisory as well), you can open a TAC case without a support contract.

You need to do it via phone and explain your circumstance to the Cisco representative; but they should open a case for you.

keenlogic · ‎01-11-2016

We just received an ASA5506-X on Friday and we are having the same issue with the ASDM image missing.

Marvin Rhoads · ‎01-11-2016

keenlogic,

You can just download the ASDM image from cisco.com (with a support contract) or open a TAC case citing the bugID to be given access to the file (without a support contract).

keenlogic · ‎01-11-2016

I opened a TAC case. Now just waiting for them to call me back.

ASA 5508-X Missing ASDM