Try it: # Create the port objects as type source. I like to add the suffix 'src' so I know it's a source type port object object service 12154-src  service tcp source eq 12154 object service 12146-to-12153-src  service tcp source range 12146 12153   # Create the network objects object network 192.168.1.10  host  192.168.1.10 object network 172.16.210.10  host 172.16.210.10   # Manually create the NAT rules. It's better than Auto NAT when using range objects nat (inside, vlan419int ) source static 192.168.1.10 interface service 12154-src  12154-src nat (asa-link,vlan419int) source static  172.16.210.10 interface service  12146-to-12153-src 12146-to-12153-src   Then you must create the proper ACLs to permit traffic to these ports on these hosts from 202.1.1.18 . Do not use the above service objects in the ACLs. There you should put destination type service objects:   object service 12154  service tcp destination eq 12154 object service 12146-to-12153  service tcp destination range 12146 12153 ... View more

I had the same problem and what I did is: downgrade to Java 7u45, and installed the Java 7u51, but I kept the older version also. I'm using ASDM 7.1 (2). It works for me, at least for now. Not tested on AnyConnect. I hope this help you. ... View more

It's not exactly what I'm looking for, but I found the problem, and it's on the certificate template issued to the ASA I will keep trying Thank you Mike! ... View more