How do I download ASDM without a contract

[rmiller]

My understanding is that ASDM is available free without a current contract but when I try to download the program I am advised I need a contract. Is there any way to get the current ASDM without a current license?

[Georg Pauwen]

Hello,

when you go to your ASA admin page (https://ip-address-of-your-asa) there should be an option to download the files...

[rmiller]

All I get is a login screen and my admin username doesn't get me in - it looks like a VPN user access login page. At top left it says "CISCO SSL VPN Service"

[Georg Pauwen]

You need the IP address of the management interface. 

Also, you need this configured (provided your managment IP address if in the 10.10.0/24 network):

http server enable 443
http 10.10.0.0 255.255.255.0 inside

Also, there should be a default version already on your disk0. Check the configuration for a line similar to the one below:

asdm image disk0:/asdm771.bin

[rmiller]

How do I ascertain the management IP if I don't know it?

[Georg Pauwen]

Hello,

default IP address is I think 192.168.1.1.

Do you have access to the running configuration ? If so, can you post it ?

[rmiller]

---

@Georg Pauwen wrote:

Hello,

default IP address is I think 192.168.1.1.

Do you have access to the running configuration ? If so, can you post it ?

---

I do, but I'm not comfortable posting it online given it's for the firewall. There is no asdm reference in the running-config though.

[Georg Pauwen]

See if you can work with this image...(rename it to .bin after downloading)...

[rmiller]

Okay, so I uploaded the .bin file to the firewall via tftp.

Do I have to restart the firewall for ASDM to load?

[Georg Pauwen]

Hello,

sorry for the late response. I am in the Central European Time Zone...

Either way, copy the file you downloaded to disk0 with TFTP.

Once the file is on disk 0, add the command:

asdm image dosk0:/asdm782-151.bin 

Make sure you have, as previously mentioned:

http server enable 443
http 10.10.0.0 255.255.255.0 inside

configured.

You should then be able to access ASDM by typing https://10.10.1.1

IP addressing is of course up to you, you might be using different addresses...

[rmiller]

Is disk0 the same as flash? I ran sho flash and this is what I've got (the results are the same if I run sho disk0):
105 14432256 Dec 31 2002 17:06:42 asa803-6-k8.bin
106 6851212 Jun 26 2008 07:50:44 asdm-603.bin
2 4096 Jul 14 2014 12:20:16 log
6 4096 Jul 14 2014 12:20:28 crypto_archive
107 24576 Dec 31 1979 17:00:00 FSCK0000.REC
108 6889764 May 29 2008 00:01:58 asdm-602.bin
110 4096 Dec 31 1979 17:00:00 FSCK0001.REC
111 26975568 May 18 2003 09:30:10 asdm.bin
112 13934592 Aug 13 2010 15:15:56 asa805-19-k8.bin
So it looks like asdm has been uploaded to this device before - I'm guessing I should use the asdm-603.bin file since it is newest?

[Georg Pauwen]

Hello,

which firewall model do you have, and which version are you running ? The ASDM version I sent you is for 9.x, looking at the date on your files, my guess is you are running 8.x ? Can you check ?

Either way, you already have ASDM on your disk:

106 6851212 Jun 26 2008 07:50:44 asdm-603.bin

Add the below command to your configuration and try to access it again:

asdm image disk0:/asdm-603.bin

[rmiller]

It's an ASA 5520
Cisco Adaptive Security Appliance Software Version 8.0(3)6
Device Manager Version 7.8(2)151

[rmiller]

---

@Georg Pauwen wrote:

Hello,

which firewall model do you have, and which version are you running ? The ASDM version I sent you is for 9.x, looking at the date on your files, my guess is you are running 8.x ? Can you check ?

Either way, you already have ASDM on your disk:

106 6851212 Jun 26 2008 07:50:44 asdm-603.bin

Add the below command to your configuration and try to access it again:

asdm image disk0:/asdm-603.bin

---

OKay, I did this, and this appears in my running-config:

asdm image disk0:/asdm-603.bin
no asdm history enable

But I still don't get anything when I go to https://10.10.1.1

[Georg Pauwen]

Hello,

on which interface do you have 10.10.1.1 configured ?

Without seeing your running configuration it is just guesswork. Which ASA version are you running ? I'll try and find a sample configuration.

Post the output of 'show version'...