unable to access the Firewall through ASDM

[Syed Aman Hussain]

                   Hi All,

Thanks in advance ,

in my organisatin we are facing one issue with launching of ASDM in ASA 5520 , when wer are trying to access the Firewall through ASDM we are unable to access that , see the java error loggs below , yes i know if we reload the firewall then this problem will solve , but my organisation management donsent want to reload the firewall , other procedure is to upgrage the ASDM version , just let me know the procedure for this

Using JRE version 1.7.0_25 Java HotSpot(TM) Client VM

User home directory = C:\Users\shussain

----------------------------------------------------

c:   clear console window

f:   finalize objects on finalization queue

g:   garbage collect

h:   display this help message

m:   print memory usage

q:   hide console

s:   dump system properties

----------------------------------------------------

ASDM Application Logging Started at Tue Aug 20 11:04:48 AST 2013

---------------------------------------------

Local Launcher Version = 1.5.30

Local Launcher Version Display = 1.5(30)

OK button clicked

Trying for ASDM Version file; url =

https://192.168.50.2/admin/

Server Version = 6.1(3)

Server Launcher Version = 1.5.30, size = 319488 bytes

invoking SGZ Loader..

Cache location = C:/Users/shussain/.asdm/cache

Exception in thread "SGZ Loader: launchSgzApplet" java.lang.NumberFormatException: For input string: "1 year 192"

at java.lang.NumberFormatException.forInputString(Unknown Source)

at java.lang.Integer.parseInt(Unknown Source)

at java.lang.Integer.parseInt(Unknown Source)

at com.cisco.pdm.Check.h(DashoA10*..:1358)

at com.cisco.pdm.Check.c(DashoA10*..:858)

at com.cisco.pdm.Check.a(DashoA10*..:438)

at com.cisco.pdm.PDMApplet.start(DashoA10*..:132)

at com.cisco.nm.dice.loader.r.run(DashoA19*..:410)

[Marvin Rhoads]

You just need to download the new ASDM binary from cisco.com and copy it to the ASA compact flash (disk0:) via ftp and change the line on the config to point to it, e.g.:

    no asdm image disk0:/asdm-613.bin

    asdm image disk0:/asdm-713.bin

That will cause the ASA to use the new ASDM and update your launcher the next time you launch it. No ASA reload or traffic interruption will occur if you do only that procedure.

[Syed Aman Hussain]

dear marvin,

find my firewall sh version output, and asdm version ,

ciscoasa# sh ver

Cisco Adaptive Security Appliance Software Version 8.0(4)

Device Manager Version 6.1(3)

Compiled on Thu 07-Aug-08 20:53 by builders

System image file is "disk0:/asa804-k8.bin"

Config file at boot was "startup-config"

ciscoasa up 1 year 193 days

Hardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode   : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05

0: Ext: GigabitEthernet0/0  : address is 0021.a09a.ba76, irq 9

1: Ext: GigabitEthernet0/1  : address is 0021.a09a.ba77, irq 9

2: Ext: GigabitEthernet0/2  : address is 0021.a09a.ba78, irq 9

3: Ext: GigabitEthernet0/3  : address is 0021.a09a.ba79, irq 9

4: Ext: Management0/0       : address is 0021.a09a.ba7a, irq 11

5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5

Licensed features for this platform:

Maximum Physical Interfaces  : Unlimited

Maximum VLANs                : 150      

Inside Hosts                 : Unlimited

Failover                     : Active/Active

VPN-DES                      : Enabled  

VPN-3DES-AES                 : Disabled 

Security Contexts            : 2        

GTP/GPRS                     : Disabled 

VPN Peers                    : 750      

WebVPN Peers                 : 2        

AnyConnect for Mobile        : Disabled 

AnyConnect for Linksys phone : Disabled 

Advanced Endpoint Assessment : Disabled 

UC Proxy Sessions            : 2        

This platform has an ASA 5520 VPN Plus license.

Serial Number: JMX1304L0HA

Running Activation Key: 0x0313c076 0x58bdf52e 0xa83245ac 0xb460b058 0x88201caa

Configuration register is 0x1

Configuration last modified by enable_15 at 10:18:47.850 AST Wed Aug 21 2013

ciscoasa#  

ciscoasa# sh run asdm

asdm image disk0:/asdm-613.bin

asdm location internal-network1 255.255.0.0 internal

[Marius Gunnerud · Accepted solution]

You could also try upgrading or reinstalling Java on the PC.

Although running the latest versions available for your system is the best thing, you could also try removing the asdm image command and then re adding it.  But as Marvin has mentioned upgrading the ASDM is probably the best way to go.

no asdm image disk0:/asdm-613.bin

asdm image disk0:/asdm-613.bin

[Syed Aman Hussain]

i tried this

login firewall

conf t

no asdm image disk0:/asdm-613.bin

then

asdm image disk0:/asdm-613.bin

its not working

[Marius Gunnerud]

What version Java are you using? Have you tried upgrading Java?

If that doesn't work then it seems that the final option (short of restarting the ASA) is to get your hands on a newer ASDM image and upgrading the image on the ASA (as Marvin has mentioned).

[Syed Aman Hussain]

my Java Version is latest version which is 7 version 7

[Marius Gunnerud]

You could try downgrading Java to version 6.  However I don't think that is a good option.  I think upgrading ASDM to a newer version that is supported by your ASA version is the way to go forward.