Can't access ASDM landing page to install launcher (ASA 5508)

[scolivan]

Hello,

Admittedly a bit of a greenhorn when it comes to working with Cisco stuff but this has been a nice challenge so far.

I'm setting up a new ASA 5508, and have configured routes similarly to what is existing on our production ASA. Firewall rule access appears to be lining up as well, but I'm curious as to whether I'm missing anything. Based on other setup guides I've seen, I don't believe so, but here's a quick list of what I have done. When I attempt to access it via the IP on its management interface, it's timing out.

• Static routes defined
• http service enabled and IPs allowed access defined
• asdm image specified and installed
• ssl configured to accept sslv3 and up, and negotiate to tlsv1.2
•  

[shgrover]

hello,

Its pretty straight forward and your config looks alright however find below the 4 line config for accesing the ASDM

http server enable
http <network> <subnet> <interface>
aaa authentication http console LOCAL

username xyz password xyz pr 15

I am sure you have checked the network connectivity form the machine you are trying to access the device from. Cannot think of anything else. Please make sure the asdm image you have installed is compatible with the ASA you are trying to access. 

https://www.cisco.com/c/en/us/td/docs/security/asa/compatibility/asamatrx.html

https://www.youtube.com/watch?v=rrOzAjhYl-A

Regards

Shikha Grover

PS: Please don't forget to rate and select as validated answer if this answered your question.

[scolivan]

I had something come to mind, actually regarding this.

Is there a chance I'd need to configure an access rule via the CLI in order to allow me to hit the ASA OR if I've defined the routes and specified my workstation IP than that's all I'd need in that regard? 

Thanks,

[Marvin Rhoads]

There are data routes for the ASA and separate management-only routes for the management interface - i.e., two separate routing tables (as of ASA 9.5(1)).

If you are using the management interface address make sure you have the latter route type setup correctly.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/general/asa-95-general-config/route-overview.html#concept_40C0C8DE2C1247319250B9F7706C54A5

[shgrover]

no access rule is required.

Regards

Shikha Grover

[syed kazim abbas]

Hello,

Normally if you have all correct configuration then, check Java version compatibility , secondly go to internet options >security>trusted sites>sites>IP ADD (ASA).

Hope this will solve your Problem!

Kazim Abbas

[syed kazim abbas]

Hello,

Normally if you have all correct configuration then, check Java version compatibility , secondly go to internet options >security>trusted sites>sites>IP ADD (ASA).

Hope this will solve your Problem!

Kazim Abbas