Firepower 1010 (ASA-Image): ASDM does not work anymore after upgrade

[swscco001]

Firepower 1010 (ASA-Image): ASDM does not work anymore after upgrade

Hello everybody,

I upgraded the Firepower 1010 (ASA-Image) from 9.14(4) auf 9.18(3)56
using the ASDM and the upgrade worked without issues.

Directly after the upgrade I still could open the ASDM and it
indicated the new OS and ASDM release.

A configuration change has not been performed.

Today I wanted to use the ASDM again but at the login I got the
error message (see screen dump):

Unable to Launch Device Manager from <outside-IF_ip-address>

I checked the usual troubleshooting documents but did not find a mistake
in the configurtion.

I know that the ASDM image of Firepower 1010 is intigrated in the OS
image file and not separate as at normal ASAs.

In the ASA configuration I have (before and after the upgrade) just:

asdm image disk0:/asdm.bin

I also tried:

asdm image disk0:/asdm-7191-95.bin

but with the same error message.

Attached you find the 'sh tech' from the ASA level and the fx-os configuration.

What can I do to get the ASDM working again?

Thanks a lot for every hint!

Bye
R.

[Marvin Rhoads]

The config in your show tech has:

asdm image disk0:/asdm.bin

Not sure what version this might be but the file with that name is a different sizes than "asdm-7191-95.bin", so I would use the latter in your asdm image command. Also, it is set to use port 8443. Please verify that you specify that when connecting and that you are coming from one of the specified addresses to the specified intrface as is configured with the following:

http 192.168.45.0 255.255.255.0 management
http 185.210.100.1 255.255.255.255 outside
http 24.134.124.37 255.255.255.255 outside
http 185.210.100.0 255.255.255.224 outside
http 10.10.30.0 255.255.255.0 inside
http 10.10.31.0 255.255.255.0 inside
http 10.10.40.107 255.255.255.255 inside
http 10.10.40.51 255.255.255.255 inside
http 10.7.0.192 255.255.255.192 inside
http 10.10.40.10 255.255.255.255 inside
http 10.10.167.0 255.255.255.0 inside
http 10.10.40.86 255.255.255.255 inside
http 10.10.40.87 255.255.255.255 inside
http 10.10.49.11 255.255.255.255 inside
http 62.157.87.152 255.255.255.248 outside
http 147.161.230.114 255.255.255.255 outside

[Marius Gunnerud]

This has happened to me a few times recently.  What solved it for me in one case was to remove http server enable 8443 and then add it back

in the second instance I needed to access the asdm via GUI to download the new asdm client. Once I installed it on my PC all was good again.

[swscco001]

Hi Marius,

thanks for you reply!

The remove/readd of "http server enable 8443" did not solve the issue.

I went to the Firepower using:

https://46.221.8.50:8443/

and downloaded the installer (dm-launcher) for a new
ASDM launcher.

When I then start the ASDM launcher I get the error message:

"This app can't run on your PC
To find a version for your PC, check with the software publisher"

What would you do in this situation?

Thanks a lot!



Bye
R.

[Marvin Rhoads · Accepted solution]

For your new/current error, modify the shortcut for ASDM.

The target should be:

C:\Windows\System32\wscript.exe invisible.vbs run.bat