Unable to access ASDM after changing SSL configs

[CiscoBrownBelt]

So I entered the following to more harden the device but now I get "Unable to launch ASDM from ..." error.

Does anyone know what the workaround is so I can keep these same versions?

I entered:

asa(config)# ssl server-version tlsv1.2

asa(config)# ssl client-version tlsv1.1

asa(config)# ssl cipher tlsv1.2 high

asa(config)# ssl dh-group group24

Previous version were:

ssl server-version tlsv1

client -version tlsv1.1

cipher default medium

ssl cipher tlsv1 medium

ssl cipher tlsv1.1 medium

ssl cipher tlsv1.2 medium

[Rob Ingram]

Hi,

I've had this issue before, check that your java version supports TLS 1.2.

HTH

[CiscoBrownBelt]

I checked JAVA and the TLS1.2 along with 1.1 and others is checked. Any other ideas?

[balaji.bandi]

You need Java version to check.

[CiscoBrownBelt]

I am not sure what you mean. Are you saying I need a different JAVA version?

[balaji.bandi]

Let me ask Full details  - before i was missed to ask and suggest.

1. what is the ASA Model

2. what is the ASA Version code running

3. what is the ASDM Loaded on ASA

4. what is the java version you have?

before making a change you able to access the device with ASDM, after new config, you not able to access ASDM to connect ASA.

how about in browser, https://ASAIPaddress ? is this works?

post the screenshot of the error.

[CiscoBrownBelt]

Great thanks. See answers below.

1. what is the ASA Model =  5585-SSP-20

2. what is the ASA Version code running = 9.6(3) 1

3. what is the ASDM Loaded on ASA = Mgmt server VM

4. what is the java version you have? version 8 Update 25 Build 1.8.0_25-b18

before making a change you able to access the device with ASDM, after new config, you not able to access ASDM to connect ASA. = Correct

how about in browser, https://ASAIPaddress ? is this works? Well loads page to download the ASDM not launch it, however I don't have permissions to proceed.

[balaji.bandi]

3. what is the ASDM Loaded on ASA = means what is the version of ASDM installed on ASA ?

how about in browser, https://ASAIPaddress ? is this works? Well loads page to download the ASDM not launch it, however I don't have permission to proceed.  - what permission, it downloads? you can not download due to local restrictions?

[Ruben Cocheno]

Check your Java version, and clear any cache on your browser and Java Applets. Check if you anti-virus/malware is not blocking this connection attempts. After restart your browser, open the website again.

[CiscoBrownBelt]

Great let me see what I can do and get back to you