Dude, got question for ya. Cause a lot of miss concepts about Asa topology, what is your point of view? The case is, Asa 5515, in a small network, with 8 public address from isp, should I use router like for example Cisco 2900 series in between isp and Asa, or put Asa directly to the internet?
This comment seemed to have slipped through the cracks - just seeing it now. You can use Visio or Draw.io for a network diagram, but we use Adobe after effects to make the animated diagrams. Hope this helps!
Hi there - I can't remember to be honest,but I had a look through the video and I'm using ASDM 7.9(2) - so whichever ASA version is compatible with that. A quick Google search shows me that 9.14 should be good. Hope that helps. Thanks for the comment!!
You'd have to give me more context like which version of asdm are you using and have you updated your Java package recently. I did that and it was a real pain to get back - but look for which version of asdm works with which Java package and that should give you your answer. Hope this helps
@@routercoach i guess java got updated cause it was working fine until recently despite the certificate expiration. I was hoping it was possible to put in a new cert, or somehow tell java to ignore the cert error. Yes, i could go hunting to see which java version works, but the other options seemed a better route.
Yes, it is a common problem with older devices. First of all you have to upgrade software on your Asa. In my case, I switched from 9.2 to 9.12 and switched asdm image to 7.18. It is essentials to use asdm with open Java embedded in asdm image. All version of Asa image and asdm compatibility you will find on cisco update map on cisco website. In general you have to switch to TLS 1.2 witch is native in newer version of Asa firmware. In 2024 I still use Asa 5515 from 2014 (10yo) with asdm on windows 10 without any problems. BTW, don't waist your time to use old browser with old tls. Even if you solve the problem you will get another one ie. JAVA :) THIS IS WRONG AND PAINFULL PATH.
@@jareklotz I have a 5505 with 9.1(7) os and 7.10 asdm. Currently the only way I can access it (using GUI) is via a Windows 7 virtual machine that has an older version of java and browsers installed. This works but is not an elegant solution.
@@TheDa6781 believe me, today I worked with Cisco PIX 515 UR via windows XP on VMware connected over internet Explorer as a Java applet. Not native asdm. This is crazy. Isn't it?
Great tutorial, Router Coach! The CLI and ASDM walkthroughs, combined with the diagram, made it super easy to follow. Thanks a lot!"
Great tutorial. Thanks.
Dude, got question for ya. Cause a lot of miss concepts about Asa topology, what is your point of view? The case is, Asa 5515, in a small network, with 8 public address from isp, should I use router like for example Cisco 2900 series in between isp and Asa, or put Asa directly to the internet?
Great course. What program are you using to make the network diagram? Thanks.
I can answer that! Microsoft Visio
This comment seemed to have slipped through the cracks - just seeing it now. You can use Visio or Draw.io for a network diagram, but we use Adobe after effects to make the animated diagrams. Hope this helps!
wich version of ASA are you using
Hi there - I can't remember to be honest,but I had a look through the video and I'm using ASDM 7.9(2) - so whichever ASA version is compatible with that. A quick Google search shows me that 9.14 should be good. Hope that helps. Thanks for the comment!!
Is there a way to regenerate an asdm certificate on asa 5505 ? I can no longer connect to the gui cause Java complains.
You'd have to give me more context like which version of asdm are you using and have you updated your Java package recently. I did that and it was a real pain to get back - but look for which version of asdm works with which Java package and that should give you your answer. Hope this helps
@@routercoach i guess java got updated cause it was working fine until recently despite the certificate expiration. I was hoping it was possible to put in a new cert, or somehow tell java to ignore the cert error. Yes, i could go hunting to see which java version works, but the other options seemed a better route.
Yes, it is a common problem with older devices. First of all you have to upgrade software on your Asa. In my case, I switched from 9.2 to 9.12 and switched asdm image to 7.18. It is essentials to use asdm with open Java embedded in asdm image. All version of Asa image and asdm compatibility you will find on cisco update map on cisco website. In general you have to switch to TLS 1.2 witch is native in newer version of Asa firmware. In 2024 I still use Asa 5515 from 2014 (10yo) with asdm on windows 10 without any problems. BTW, don't waist your time to use old browser with old tls. Even if you solve the problem you will get another one ie. JAVA :) THIS IS WRONG AND PAINFULL PATH.
@@jareklotz I have a 5505 with 9.1(7) os and 7.10 asdm. Currently the only way I can access it (using GUI) is via a Windows 7 virtual machine that has an older version of java and browsers installed. This works but is not an elegant solution.
@@TheDa6781 believe me, today I worked with Cisco PIX 515 UR via windows XP on VMware connected over internet Explorer as a Java applet. Not native asdm. This is crazy. Isn't it?
Hey bro, Are you talking to yourself?
Too much talking that has nothing to do with the subject matter.
Thanks for the comment.
Please direct us to your RUclips channel where you show us how it's done the right way.