ASA 5505 ASDM configuration

Axis52401 used Ask the Experts™
We have a new ASA 5510 and are trying to use the ASDM when you load the program and connect to the device it seems to load and then says unable to read configuration from device and to check the configuration. However if you put the ASA's IP address in a browser and select run ASDM as applet it comes up in the browser and works that way. Do you know why the program itself won't run? I've posted the config below. We're putting this router online tomorrow so if anyone see's anything in the configuration that will prevent it from working feel free to comment.


domain-name axisie
enable password bh.FA1Do8rU5EiE3 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
interface Vlan1
 nameif inside
 security-level 100
 ip address
interface Vlan2
 nameif outside
 security-level 0
 ip address
interface Vlan3
 no forward interface Vlan1
 nameif dmz
 security-level 50
 ip address dhcp setroute
interface Ethernet0/0
 switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
 switchport access vlan 3
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
dns server-group DefaultDNS
 domain-name axisie
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
access-list outside_access_in remark Terminal server access
access-list outside_access_in extended permit ip any host
access-list outside_access_in remark Mail
access-list outside_access_in extended permit ip any host
access-list acl-out extended permit icmp any any
access-list acl-out extended permit tcp any any eq www
access-list acl-out extended permit tcp any any eq 3389
access-list acl-out extended permit tcp any any eq smtp
access-list acl-out extended permit tcp any any eq 3396
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
mtu dmz 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-524.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1
nat (outside) 0 outside
static (inside,outside) tcp interface 3389 3389 netmask 255.255.25
static (inside,outside) tcp interface smtp smtp netmask 255.255.25
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http inside
http inside
http inside
http inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet inside
telnet inside
telnet timeout 5
ssh timeout 5
console timeout 0
management-access inside
dhcpd auto_config outside
dhcpd dns interface inside
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Which version of ASDM on your PC are you trying to access the ASA with and are you just launching ASDM and then adding the new ASA as an IP in the existing version you have on your machine?

Also what version of code and asdm are currently running on the 5505 (show flash:) will provide the information. If you have multiple versions of asa code and asdm code in the flash please do a show asdm image to determine which the device is expecting.

this some times happened due upgrading your Java!
so, try connect to it using HTTPS ,, then click on option "run applet"
this may allow the executable ASDM  to work again..

otherwise,, upgrade your ASDM version to 6.x
or if you upgrade your Java version,, then ,, rollover to the old one

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial