ASDM ISSUE AFTER JAVA 7 UPDATE 7 UPGRADE

[veltech]

Hi All,

PROBLEM

We are having a problem with ASDM following an upgrade to Java RE 7 update 7 following the recent security issue. We carried out the upgade following notification of the Java 0 day virus. Following upgrades to all our machines we can not now use ASDM. We get a message stating that we need to install Java Runtime, which is already installed.

TROUBLE SHOOTING SO FAR

Tried to uninstall V7 and reinstall - did not work.

Tried to uninstall ASDM and reinstall - Could not unistall as system requires the Java for an uninstall as well as an install.

Tried on different OS such as XP, Windows 7 - Same problem.

We feel sure this is a Java issue but what's the fix ??

We could try downloading an older version of Java and reinstall but before taking this step we want to try and get V7 working as we understand the earlier versions are not safe.

Any help appreciated.

Thanks.

[Chris Miller]

Unless you upgrade code on the ASA for ASDM, you will need to use an older version of Java.

Hopefully you still have an older version, like I do and perform these steps:

1.Find the asdm-launcher.config file (C:\Program Files\Cisco Systems\ASDM\asdm-launcher.config).

2.Right click, choose properties and remove the 'read only' check.

3.Open the file and add the following line: javapath c:\Program Files\Java\jre1.6.0_07\bin\client\jvm.dll (switch this path with the path to your jvm.dll file).

4.Save the file and replace the read only check.

5.Start ASDM and it should use the version of java you specified instead of the latest.

[veltech]

Hi Chris,

Thanks for your reply and suggestions. We will take a look at this in our lab on Monday and see how we get on. For the time being we installed an earlier version of java that was compatable with ASDM.

Regards,

[Javier Portuguez]

Hi there,

Chris, you are right, that should do it (5 stars)

However, I recommend to you to run the latest ASDM version along with the latest Java version, so you take advantage of new features and functionalities.

Hope to help.

Portu.

Please rate any helpful posts.

[Reynaldo Silva]

Great...

I was with the the problem.

How can i mark this this question?

Tks a lot big

Muhammad Thanveer

[Muhammad Thanveer]

ssl encryption aes256-sha1 des-sha1 3des-sha1

Application error - Unable to launch the application

this may be helpful

Regards
Thanveer
"Everybody is genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is a stupid."

[Javier Portuguez]

Hi,

This last week I have heard about so many issues with Java 7 and ASDM and so far the only workaround is to downgrade the Java version.

Thanks.

Portu.

[Javier Portuguez]

Muhammad,

Please mark this question as answered if you do not have any further questions.

Thanks.

[Muhammad Thanveer]

Sorry I cannot mark it so, as I am not the initiator of this query.

Regards
Thanveer
"Everybody is genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is a stupid."

[Julio Carvajal]

Hello Everybody,

Actually this is a well known issue, lot of cases after an upgrade to java version 7.

There is already a bug for this:

CSCts17526

ASDM Launcher does not work with JAVA version 7

Symptom:ASDM Launcher hangs when JAVA version 7 is used. However, it is still accessible from the browsers. The following exception is seen:"Exception in thread "AWT-EventQueue-0" java.lang.ClassCastException: sun.security.ssl.X509TrustManagerImpl cannot be cast to com.sun.net.ssl.internal.ssl.X509ExtendedTrustManager"Conditions:Using JAVA version 7.Workaround:Use JAVA version 6 or access ASDM from the browser.

So to make things easier the work-around right now is to dowgrande but there is the following option as well:

1. Access ASA from the client machine using https
2. Instead of saving and installing ASDM launcher, try to "Run ASDM" from browser as java applet.
3. ASDM will load after putting credentials and it will automatically create shortcut on desktop which can be used for accessing ASDM later.

Note : You'll not get option of "Run ASDM" in case of accessing ASA from Google Chrome. So, try to use IE or Mozilla.

Witch one it's all up to you.

Hope I could help,

Remember to rate all of the helpful posts

Julio