Cannot Access / Open ASDM
KB ID 0000458 Problem Out of the box Cisco PIX/ASA devices should have a working ASDM. This config can get broken over time, and also there are a few things that can trip you up on your client machine. Solution Make sure the client machine you are using is not the problem 1. The ASDM runs using Java make sure the machine has Java installed. Note: If you are using Java version 7 Update 51 see the following article. Unable to Access...
Cisco ASA – Password Recovery / Reset
KB ID 0000572 Problem Note: This procedure allows you to reset the password WITHOUT LOSING THE CONFIG You need to access a Cisco ASA device and do not have the passwords, there can be lots of reasons for this, lack of good documentation, bought a second hand firewall, the last firewall admin never told anyone etc. This method does require physical access to the ASA, a console cable, and a machine running some terminal emulation...
Unable to Access ASDM – “Unable to launch device manager from…”
KB ID 0000915 Problem A colleague of mine was trying to connect to a firewall via ASDM last week, and was greeted by an error like this. Now this is a pretty standard error, and usually means you haven’t been allowed access, or there isn’t a firewall at that address, but in this case I knew that a) he did have access, b) that was the correct IP address, and c) it worked fine on my machine, so it was setup correctly. As I...
Cisco Firewalls and PING
KB ID 0000351 Problem With regards to Ping, out of the box a Cisco firewall will allow you to ping the interface you are connected to, so in a normal setup inside clients can ping the inside interface, and the firewalls outside interface can be pinged from outside. OK – to understand pinging through a Cisco Firewall you need to understand that Ping is part of the ICMP protocol suite, and unlike other protocols is not “connection...
Cisco ASA ‘Ping Source?’
KB ID 0001445 Problem To be honest, the title is a little misleading, on an ASA you can specify which interface to launch a ‘ping’ from, but that’s it. I found myself in a situation today where I was working on a client firewall and I was trying to bring up a VPN tunnel, and I did not have access to any of their machines, and nor did they, (hence the reason for the VPN tunnel!) Well we can’t use good old...