Installing ASDM on a Cisco PIX Firewall

After going command line for the past year on our upgraded PIX 515e, I decided to install the GUI control module known as the ASDM (Adaptive Security Device Manager). I was expecting it to be more of a involved install but the short story is:

1.     Download ASDM

2.     Copy to PIX flash

3.     Point PIX to image

I’ll run you through the long version now.

Let’s start out by going to Cisco and downloading the ASDM image for your respective PIX model and IOS version.

http://www.cisco.com/en/US/products/ps6121/index.html

You’ll need a CCO account to login and download the software.  Just make sure you find the right version. I’m running a PIX 515e with 7.2(2) so I downloaded ASDM 5.24.  I also downloaded the client end software which you can install on your PC to remotely control the configuration of the PIX without ever having to connect (great!). You can skip this and download later.  If you login into the web interface of your PIX after completion it will prompt you to download if you so desire.

Okay so you’ve downloaded the ASDM image let’s get it installed:

Login to the PIX – go to enable mode

Copy the ASDM image to the PIX via tftp (you’ll need a tftp server if you don’t have one installed already – go download the free one at solarwinds.com)

PIX# copy tftp: flash

"Address or name of remote host?” Put in the IP Address of your tftp server and hit .

"Source filename?" Enter the filename of the ASDM image.  Mine was asdm524.bin.

"Destination file name?" Just hit enter to leave the same filename on the PIX flash.

After copying for a few minutes it was done.  Now we just need to change some lines in the running PIX config to tell it where the new image is.

Goto configuration mode:

PIX# conf t

Then type the location of the ASDM:

PIX (config) # asdm image flash:/asdm-524.bin

If your version is different you’ll have to adjust the above line .bin file.

Now let’s enable the web interface on the PIX:

PIX (config) # http server enable

Last part is to allow connections from the inside interface of your firewall.

PIX (config) # http 0 0 inside

Of course this can be adjusted with your security policy and only allow it from certain networks or hosts.

That’s it.  Access the GUI by pointing your browser to:

https://ip.address.your.pix/admin

If it works make sure you don’t forget to save your running config (write mem).

Enjoy!