Why I can run my asdm ?

[glauciomelo]

I tried all day, but I am unable  to run my asdm.

I  configure the hhtp server , the user , the aaa,the crypto key, but doesn't open.

I can ping my firewall interface,somebody can help me ?

I

hostname ciscoasa
enable password 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
 shutdown
 no nameif
 no security-level
 no ip address
!
interface Ethernet0/1
 shutdown
 no nameif
 no security-level
 no ip address
!
interface Ethernet0/2
 shutdown
 no nameif
 no security-level
 no ip address
!
interface Ethernet0/3
 shutdown
 no nameif
 no security-level
 no ip address
!
interface Management0/0
 management-only
 nameif management
 security-level 100
 ip address 192.168.1.1 255.255.255.0
!
ftp mode passive
pager lines 24
logging asdm informational
mtu management 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-717.bib
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
no ssh stricthostkeycheck
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd enable management
!
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
username cisco password 3USUcOPFUiMCO4Jk encrypted
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect ip-options
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:3d6fd3b23bdf0f05376a43a0b5a1094a

[ron.pickar]

Have you verify the asdm image path and file.

asdm image disk0:/asdm-717.bib --> The files I have worked with are BIN files.

Thanks,

Ron

[glauciomelo]

I change the file, sorry.

this is the correct:

ciscoasa# sh asdm image
Device Manager image file, disk0:/asdm-717.bin

[Marvin Rhoads]

When you say " I am unable  to run my asdm", what exactly are the symptoms you see?

You've only given us a partial configuration - some problems can be related to the ASA version, for example.

Are you able to browse to the management interface address via https://192.168.1.1/admin and see the ASDM launcher/installer web page?

Have you looked at the ASDM troubleshooting page to rule out common problems? 

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/110282-asdm-tshoot.html

[glauciomelo]

NO, I am not able to run nothing ,the page doesn't open.

Yes, I checked the page, I checked java version, I tried  antivirus almost everything I tried.

ciscoasa# sh ssl
Accept connections using SSLv2, SSLv3 or TLSv1 and negotiate to TLSv1
Start connections using TLSv1 and negotiate to TLSv1
Enabled cipher order: des-sha1
Disabled ciphers: 3des-sha1 rc4-md5 rc4-sha1 aes128-sha1 aes256-sha1 dhe-aes128-sha1 dhe-aes256-sha1 null-sha1
No SSL trust-points configured
Certificate authentication is not enabled

ciscoasa# sh asdm image
Device Manager image file, disk0:/asdm-717.bin

[glauciomelo]

I added my asdm as an exception on the  java.

[Aditya Ganjoo]

Hi,

Can you use the following command:

no ssl encryption des-sha1

And then test ?

It seems all your encryptions except des-sha1 are turned off.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[glauciomelo]

I did, and still the same...

[Marvin Rhoads]

It looks like you probably don't have the free 3DES-AES license installed. Without that you won't have the stronger ciphers available. Those are required for Java (whose libraries ASDM uses) to negotiate a secure connection to the ASA. 

[glauciomelo]

Now I actived the licence.

Still the same.

[Marvin Rhoads]

Now that you've activated the license, you need to go in and turn on those strong ciphers.

From the cli configuration mode, please enter:

ssl encryption aes128-sha1 aes256-sha1 3des-sha1