Unable to access ASDM from INSIDE interface - ASA5506

[BigDog64]

Can't seem to wrap my head around this...

There's an ASA 5506-X sitting on my desk directly connected to my laptop.

I'm having no issue connecting to ASDM when the laptop is connected to the management interface. However when I connect the laptop to the inside interface, I get an ASDM error "Unable to launch device manager from 192.168.10.1".

I've configured multiple ASAs in the past and I've never encountered this. I need to be able to access ASDM from the inside, not just from the management interface.

I can ssh and ping to the inside interface from the laptop.

Here's the related configs:

int g0/0
 nameif inside
 ip addr 192.168.10.1 255.255.255.0
 no shut
!
http server enable
http 0 0 inside

[balaji.bandi]

Config looks ok

int g0/0
 nameif inside
 ip addr 192.168.10.1 255.255.255.0
security-level 100      < add this line
no shut

Try remove http config and add back

no http server enable
no http 0 0 inside

http server enable
http 0.0.0.0 0.0.0.0 inside

try from Pc https://192.168.10.1 ?

[BigDog64]

This did not resolve the issue.

[balaji.bandi]

Post complete configuration of ASA, show version to look what wrong?

1. are you able to ping ASA IP address?

2. from ASA are you able to ping the device IP address

3. what is the PC gateway? is the ASA IP address?

[BigDog64]

As stated in the original post, I am able to ping the ASA inside interface from the PC.

I am also able to ping the PC from the ASA.

The gateway of the PC is set to the ASA's inside interface.

***I'll post both the show run and show version tomorrow.

[balaji.bandi]

Sure post complete configuration to understand the issue.

[B. BELHADJ]

Hello

Your config looks good.

Try to upgrade your Code to a new version.

Best regards

[BigDog64]

I suspected it may be some issue with the current ASA version... Note that this is a straight out-of-the-box new ASA 5506-X purchased from Cisco. However, I've received multiple 5506-X in the past, and never encountered this issue.

I'll try upgrading it, if all else fails.

[Marius Gunnerud]

Make sure to check the compatibility matrix to be sure that the ASDM version you are running is also compatible with the ASA version.

https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html#id_65776

[B. BELHADJ]

This could confirm what I suspect!

Please try it. I don't see any issue on your configuration or the ASDM image because you can access it from the Management interface.

let us know!

Best regards

[Marius Gunnerud]

Run the command show run asdm and dir.

Without seeing your complete configuration, a possible issue could be that you either not have an ASDM image configured, the ASDM image is not present in flash, or  the ASDM image is corrupt or not supported by the ASA version.

[BigDog64]

I mean, I'm able to access ASDM when the PC is connected via the management interface. In my mind, if this was an ASDM image issue, I wouldn't be able to access ASDM at all, right?

Again: I'm only able to access ASDM from the management interface, when I disconnect my PC from the management interface and connect it to the inside interface, I get the "Unable to access device manager..." error (and yes, I reconfigure the PC's IP configuration accordingly).

Not my first rodeo with ASAs, but I've never encountered this issue before. There seems a bunch of similar issues on these boards, but none that only allows ASDM access via management, and errors out for inside.