cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5246
Views
0
Helpful
4
Replies

ASA 5525-X IPS ASDM Management

Moises Araujo
Level 1
Level 1

Hello guys, can somebody help me?

I can't access the IPS software module in the ASDM. When I try acess I got the error message:

Error connecting to sensor. Error Loading Sensor

Output from ASA:

ASA# sh module ips details

Getting details from the Service Module, please wait...

Card Type:          ASA 5525-X IPS Security Services Processor

Model:              ASA5525-IPS

Hardware version:   N/A

Firmware version:   N/A

Software version:   7.1(4)E4

App. name:          IPS

App. Status:        Up

App. Status Desc:   Normal Operation

App. version:       7.1(4)E4

Data Plane Status:  Up

Status:             Up

License:            IPS Module  Enabled  perpetual

Mgmt IP addr:       11.0.0.2

Mgmt Network mask:  255.255.255.0

Mgmt Gateway:       11.0.0.1

Mgmt Access List:   0.0.0.0/0

Mgmt web ports:     443

Mgmt TLS enabled:   true

I can access the IPS from ASA, but I can't ping the IP address from ASA, access from my LAN or access from ASDM from AnyConnect VPN session:

ASA# sh module ips details

Getting details from the Service Module, please wait...

Card Type:          ASA 5525-X IPS Security Services Processor

Model:              ASA5525-IPS

Hardware version:   N/A

Firmware version:   N/A

Software version:   7.1(4)E4

App. name:          IPS

App. Status:        Up

App. Status Desc:   Normal Operation

App. version:       7.1(4)E4

Data Plane Status:  Up

Status:             Up

License:            IPS Module  Enabled  perpetual

Mgmt IP addr:       11.0.0.2

Mgmt Network mask:  255.255.255.0

Mgmt Gateway:       11.0.0.1

Mgmt Access List:   0.0.0.0/0

Mgmt web ports:     443

Mgmt TLS enabled:   true

ASA# session ips console

Opening console session with module ips.

Connected to module ips. Escape character sequence is 'CTRL-^X'.

ASA# ping 11.0.0.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 11.0.0.2, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

ASA# ping 11.0.0.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 11.0.0.1, timeout is 2 seconds:

?????

Success rate is 0 percent (0/5)

ASA#

Thanks

4 Replies 4

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Moises,

Can you share the show run interface ( Just the managment output is need it)

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi Moises,

Just change the Java runtime and use 6 edition and it will work.

rate is better than any word

Regards,

Ibrahim,

Hi Ibrahim,

I am having the exact same problem as Moises. Can access IPS via a "session ips" command, but no other way.

I am running Java 7 and Windows 8. I tried to access ASDM with an XP laptop on Java 6(20) and I still received the same error.

I think it is to do with the routing as I also can't ping once in the IPS session.

Thanks,

I have same problem, check IPS interface IP and acces-list ,if that is no problem ,check the java .I access ASDM  with xp sp3 java7 update 9 have a Error connecting to sensor. Error Loading Sensor,change jre-6u37-windows-i586 will work .

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card