Got different version of ASDM and can't work from the same Firewall

[Jerry.Lv2016]

We have a ASA firewall with ASDM 649.bin,and my colleague got version 1.7(56) from it several days ago and works fine.

But I got version 1.5(56) from the same firewall and can't manage the firewall,always prompt that unable to launch device manager from my IP address.Is it in relation to the authority of my AD account when login my laptop,my AD account don't have full admin permission. 

Does anyone had met the same case or has any ideas about this?

Thanks.

[Marvin Rhoads]

"Unable to launch" issues almost always result from Java security or ASDM file (on the ASA) issues.

Since it works for another user, the file issue is probably not the case.

Can you provide the output from ASA command line of "show run asdm", "show run ssl" and "show run http"?

[Jerry.Lv2016]

Is it a normal situation that me and my colleague got different version of ASDM from the same ASA?

I had check the version of Java before, my version is newer than my colleague,and I tried a few version,but can't launch too.

show information you mentioned as below:

show run asdm
asdm image disk0:/asdm-649-103.bin
no asdm history enable

show run ssl
ssl encryption aes128-sha1 aes256-sha1 3des-sha1 dhe-aes128-sha1 dhe-aes256-sha1
ssl trust-point SSL_VPN_2014
ssl trust-point SSL_VPN_2015 Outside vpnlb-ip
ssl trust-point SSL_VPN_2016 Outside

show run http
http server enable
http 0.0.0.0 0.0.0.0 Inside
http 192.0.111.0 255.0.255.0 Inside

[Marvin Rhoads]

That's really odd that you would get different launcher versions. I'd suspect your colleague already had launcher installed previously as the ASDM 6.4(9) is quite old and would include the 1.5(x) launcher and not 1.7(x).

Your output looks in order. I'd do a packet capture on the PC that's not working and see if I could find the issue. Alternatively, I'd open a Java console and watch it while you try to launch ASDM.

[Jerry.Lv2016]

Hi 

Since your last reply 7 months ago, I did nothing and shelved it. 

But when I tried to login ASA using ASDM  2 months ago, it works fine.

Unfortunately, when I tried to use ASDM, the same error happened again.

I know it has been longtime ago,could you please help to diagnose

 this issue?

Attach the Java console.

Thanks a lot.

[Marvin Rhoads]

Try lowering your Java security levels from "Very High" to "High" in the Java control panel applet.

Whenever you update Java, be sure NOT to accept the prompt to "Restore Java security levels".

[Jerry.Lv2016]

Thanks.

The security level used to be "high",but it didn;t work.

Please see the attachment.

[Marvin Rhoads]

Can you perhaps install the current ASDM version on the ASA? ASDM 7.6(2) is compatible with any ASA running ASA software version 8.0 or later.

http://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#48552

If not, you can also try adding your ASA address in your Java "exception site list" as described here:

https://java.com/en/download/faq/exception_sitelist.xml