ASA 5508-X Missing ASDM

[munzeljmm]

I am in the process of configuring an ASA 5508-X. I have been following the quick start guide, but can't seem to get to the ASDM software. I am referencing it at http://192.168.1.1/ per the instructions but am getting an error that the path "/admin/public/index.html" cannot be found, instead of the links to download the software. I know I am connecting to the ASA or I wouldn't be getting redirected. When I do a "show flash" in the console I don't see any reference to any ASDM files. Am I missing something, is the device missing software, or what is up?  I don't currently have a support contract and while I'm not opposed to getting one, I would like to see the device work before I spend that extra money. I would think the basic out of the box functionality should just work, no support necessary. 

Can anyone point me in the right direction of where to go next?

[TekNecksLLC]

I went through the same process a few month's back.  Had to manually load the ASDM image using a TFTP server on my laptop, much like upgrading the firmware.

I did finally get my ASA working, fortunately I had a support contract.  I recall the Cisco instructions were pretty clear on how to resolve this. 

It did, however, take me a few days to admit defeat and call TAC for help.  Wish I could get those days back somehow.

Good luck!!

[Rene Elgaard]

Just to follow up on my own post:

I did (and do) not have a support contract, and TAC was not very helpful, despite me describing the situation.

They directed me to the dealer which in turn together with the local distributor were kind enough to help me out.

[fbeye]

I seem to be having the same problem, among possible other problems.

It seems I can not really even configure any aspects of my Router... Nor do my Management Port or 1/2 (LAN) Ports Light up.. They seem to be down by default where they are supposedly suppose to be up.

Does it appear I too am missing the ASDM?

> show flash:
--#-- --length-- -----date/time------ path
78 107035120 Mar 31 2017 14:45:06 os.img
79 33 Apr 02 2018 23:50:02 .boot_string
80 150474 Jun 22 2017 09:39:18 install.log
15 4096 Jun 22 2017 10:02:42 log
17 34183 Apr 02 2018 23:54:59 log/asa-appagent.log
21 4096 Jun 22 2017 10:03:32 crypto_archive
22 4096 Jun 22 2017 10:03:38 coredumpinfo
23 59 Jun 22 2017 10:03:38 coredumpinfo/coredump.cfg

7366520832 bytes total (7258775552 bytes free)

> show version
--------------------[ ciscoasa ]--------------------
Model : Cisco ASA5508-X Threat Defense (75) Version 6.2.0 (Build 363)
UUID : 1dce82f4-572f-11e7-a59d-98e725154532
Rules update version : 2016-11-29-001-vrt
VDB version : 271
----------------------------------------------------

[Rahul Govindan]

You are running "Cisco ASA5508-X Threat Defense (75) Version 6.2.0 (Build 363)". This is different from the ASA operating system. This OS is managed by the local manager (Firepower Device Manager) or central manager (Firepower Management Centre).

Do a "configure manager local" and then if you go to https://<mgmt-ip>, it should take you to the local manager by default. No ASDM for Firepower threat defense devices.

If you want to the ASA OS, you would have to re-image this. Steps here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html#id_57458

[fbeye]

Thank you so much. Makes complete sense that my specific device is an FDM/FMC configuration and not the ASDM. I am fine not using ASDM I was just confused (ignorant) as to why it was not there.

What throws me off is as I say, neither GBit 1/2 or Management Ports are assigning a dynamic IP. Really by default they are supposed to.

GBit 1/2 doesn’t even bother to light up (probably in shutdown) but what is weird is Management lights (power and activity) on both the ASA and my Desktop are lit, but not receiving an IP!

So my only way in is Console which, as far as my ability goes, allows me to do nothing much.

Prior to your response, which is my next step, I did recall doing “show manager” and it showed local and also did “configure manager delete” and it stated DHCP is now shut down but whenever I did “show manager” it still said local.

I have not done “configure manager local” yet, though so maybe that is key.

I assume that then enables the access via Management.

I will give this a try when I get home and I thank you for the information.

[rmunoz10]

Same thing here on an 5515-X. Unfortunately the Cisco rep refused to open a case without a contract.

[rmunoz10]

Some more info below. The asdm file is not there. Anything I'm missing?

ciscoasa(config)# sh ver

Cisco Adaptive Security Appliance Software Version 9.8(2)20
Firepower Extensible Operating System Version 2.2(2.63)

Compiled on Fri 02-Feb-18 06:18 PST by builders
System image file is "disk0:/asa982-20-smp-k8.bin"
Config file at boot was "startup-config"

ciscoasa(config)# sh flash
--#-- --length-- -----date/time------ path
109 108877824 Mar 04 2018 01:50:56 asa982-20-smp-k8.bin
12 4096 Apr 21 2017 11:51:44 log
14 3773 Mar 17 2022 20:10:17 log/asa-appagent.log
24 4096 Apr 28 2016 10:27:16 crypto_archive
27 4096 Apr 28 2016 10:27:26 coredumpinfo
28 59 Apr 28 2016 10:27:26 coredumpinfo/coredump.cfg
111 4096 May 11 2016 14:09:58 tmp
112 108896256 Sep 02 2018 03:25:02 asa982-38-smp-k8.bin
25 4096 Jun 30 2017 00:17:40 snmp
26 4 Sep 03 2018 04:09:12 snmp/single_vf
113 46035160 Nov 23 2019 12:28:48 anyconnect-win-4.7.02036-webdeploy-k9.g
114 46861028 Nov 23 2019 12:30:16 anyconnect-macos-4.8.00175-webdeploy-kg
115 37283100 Nov 23 2019 12:28:58 anyconnect-linux64-4.7.02036-webdeployg

8238170112 bytes total (7889350656 bytes free)
ciscoasa up 52 mins 24 secs

[fbeye]

Seems what you are missing is actually the Device Manager.

Mine is;

Device Manager Version 7.5(1).

I know it is silly but when you, connected from

PC to ASA GE 1/1 and do https://192.168.1.1 nothing comes up? 
Fortunately in my case I had also simply

just purchased the FTD version, not ASA. When I returned it and got ASA version, it had ASDM so I didn’t really find a solution, simply exchanged it.

Depending on how much you paid for this…… Would it be worth just getting the extended agreement?

The FPR1010 is far superior and is the “next wave”.

They have ASA version and NGFW (FTD). 500-600 bucks.

I wish I had a way to encourage you to correctly word a google search to find something…… But I am not sure how to do so.