This is an FYI.
I had an issue with ASDM when upgrading a couple of ASA5512 Firewalls to 9.5(2) code.
I upgraded the ASDM image to 7.5(2) first & reconnected, all was well.
I then upgraded the ASA image to v9.5(2) & set as boot image & rebooted. The firewall came back & all services through it were fine including VPN's.
But I could NOT reconnect to the FW via ASDM. I still had SSH access.
ASDM launched to just past login & then errored "could not connect to device manager".
A bit of digging revealed that the SSL Encryption command has been deprecated from this version & replaced with the SSL Cipher command.
A "sh run | inc ssl" reveals the default SSL Cipher commands entered in replacement for SSL Encryption command.
They are all custom configs with a limited list of algorithms. These do NOT include support for TLSv1.2 which is required for ASDM access.
To fix this issue, add one of the following commands to the SSL Cipher config;-
ssl cipher tlsv1.2 all (for any algorithm, whether secure or not)
ssl cipher tlsv1.2 custom "add the algorithms you want support in these quotes" (or copy the limited list from the sh run above)
This will restore access via ASDM.
As another FYI, Cisco include support for TLSv1 in the default SSL Cipher commands, this should no longer be in use AFAIK, so you may want to NO that command out.
Hope this helps others
CW
