Cannot Browse to SSM-10 IPS

[FRANK CAPOZZA]

HI.

I am having a problem browsing to the IPS SSM-10 module. I am getting a secure connection failed. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

ip of ASA 10.57.61.43

ip of IPS 10.57.61.42

I can browse to the ASA. From the ASA I click on IPS , put in the username and password but it fails.

I can SSH to both the ASA and the IPS

From the IPS, I can ping the ASA.

I tried firefox, chrome and explorer...all don't work.

Any help would be appreciated.

Frank

[Marvin Rhoads]

Did it ever work for you?

if so, when did it stop and what changed - updated Java perhaps?

[FRANK CAPOZZA]

Thanks for responding. No still not working. I have a similar firewall that works fine.

One thing I noticed is that this one does not have rsa-keys under service ssh. It only has rsa1-keys. The one that works has both rsa-keys and rsa1-keys option. If I do a ssh host-key IP Address I get an error.

Any ideas?

[tm12]

I found the solution

After making sure I allowed the inside network access to the IPS port, and that port was configured with an address and netmask of the inside network I looked at my browser settings.

Apparently you need SSL 2.0 and 3.0 enabled as well as TLS 1.0 thru 1.1. Disable TLS 1.2

In Java settings disable TLS 1.2

Install security certificates from the IDS into Java and the browser as a trusted site and issuer

If that doesn't work, in the end I rolled back to java 6u45 and magically it worked.