asdm from outside

[erikgrissom]

Hi.

im working on a small project on a asa 5505 and beacuse i do most of the work from the outside

i want to open up asdm without vpn.

i tried to add asdm access

http 0.0.0.0 0.0.0.0 outside but i does not work :-(

i have it working on another asa and the only difference is the rom version.

the one not working is 8.0(5) - 6.2(3)

and the one working is 8.0(4) - 6.1(5)

did they do some changes?

//:Erik

[varrao]

A couple of things that you might need to check:

1 . The output of shoqw run http, check if http server is enale on port 443 only oer on some other port.

2.  Check java version on your computer.

3.  Check the output of "show run asdm", it should point towards the asdm image that you are using.

4.  Check if you are using any proxy server on the host machine.

Thanks,

Varun

[Kureli Sankar]

Erik,

Pls. check this link and run through the check list.

https://supportforums.cisco.com/docs/DOC-13012

-KS

[erikgrissom]

Hi

and thanks for all the replyes.

after a lot of trial and error it seems that webvpn and no access rules can be in the config for asdm outside

to work. i have now confirmed this with 2 separate asa. the only thing that is still bad about this is that

if you are running for example a exchange server on the inside and are using OWA this will not work beacuse of the

access rules.

is there a way to change the port for the asdm accessing from the outside, from inside it works fine to change the port.

//:Erik

[varrao]

Hi Erik,

If you want to change the port for ASDM access, you might do it by:

http server enable 8443

This would change the port for accessing the ASDM from any interface on 8443 only, but be mindful that now, in the browser you would need to type this url:

https://:8443

eq:

https://10.1.1.1:8443

Thanks,

Varun

[erikgrissom]

Hmmm thats strange got it to work now, i did that 20 min ago and  change the asdm to port 445 and it worked from inside 1.1.1.1:445 but when i tried it from a outside computer with the outside ip:445 it did not work?

well im just happy i got it working.

Thanks

//:Erik

[varrao]

Thats good you got it working

Varun