No Response with ASDM on Re-configed PIX 515e

boaz.clark · ‎03-12-2009

I have dusted off an old PIX 515e and want to use it to isolate our test lab. I erased the current configuration and then setup a test configuration with one wrkstn attached.

I enabled dhcp and it is delivering address within the scope to the wrkstn.

I can also ping both directions.

I configured http to ip 10.10.1.1 255.255.255.0 inside

I configured the outside int 0 to ip 192.168.2.7 255.255.255.0

I configured the inside int 1 to ip 10.10.1.2 255.255.255.0

However, when I launch the browser I am unable to get any web page other than the error page.

Is there another configuration I am missing or did I do the above incorrectly? I also looked for the program ASDM download on Cisco site but did not get any hits. Is this program downloadable? Do I install on the PIX or the wrkstn?

Thanks in advance for your support

Bo

robertson.michael · ‎03-13-2009

Hi Bo,

I assume you are running PIX 7.x or 8.x code, as you are referring to using ASDM and not PDM. Is this correct?

ASDM should be installed on the PIX's flash and a Java applet will then be run on your workstation. Simply copy the file to the flash and configure the PIX with the 'asdm image' command (see below). You'll need to make sure you download a version of ASDM that is compatible with your version of PIX software. You can download the ASDM images from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/pix

Once the ASDM image has been copied and you have configured the 'asdm image' command, you should simply be able to browse to https://10.10.1.2 and you will be prompted to start the ASDM applet. Note that you'll need to connect with https: and not http: (this will return the error page you are seeing).

Try these steps and if you are still having trouble, let us know and, if possible, post a copy of your current config. Here are some helpful links:

Downloading a file to flash:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/mswlicfg.html#wp1054661

'asdm image' Command Reference:

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/a2_72.html#wp1480360

Allowing HTTPS access for ASDM:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/mgaccess.html#wp1047288

Hope that helps.

-Mike

boaz.clark · ‎03-13-2009

Michael,

Thanks for the reply, sounds like I can't use ASDM. Looks like I am using PDM. Is there a GUI interface for my version? Below is my version from the PIX. Any additional info will be appreciated.

Cisco PIX Firewall Version 6.3(3)

Cisco PIX Device Manager Version 3.0(1)

Compiled on Wed 13-Aug-03 13:55 by morlee

002FWDC up 4 mins 56 secs

Hardware: PIX-515E, 32 MB RAM, CPU Pentium II 433 MHz

Flash E28F128J3 @ 0x300, 16MB

BIOS Flash AM29F400B @ 0xfffd8000, 32KB

dmooreami · ‎03-13-2009

515e can be upgraded to run Pix OS 7.2 or 8.x

If you want to access the old PDM, that version needs Java 1.42 to load the pdm.

There is a 3.0(4) version of the PDM that will work with Java 6 release 7.

Do not upgrade java to anything past release 7 if you plan to use older ASDM versions. Do a search in this forum for "ASDM launcher ERROR" for me details