Cisco ASA – How to Remove ASDM

cisco-asa

Hi im trying to remove ASDM from my ASA.

Ive deleted the bin file from the flash drive and did a config factory-default
But i can still connect to the ASA through ASDM.

Is it posible to remove it? How?

I would like to uninstall ASDM from ASA.

Best Answer

You did uninstall it... from the ASA. All that's on the ASA is installer packages. Once you've used ASDM from the firewall (https... Install ASDM Launcher), then you have ASDM on your PC; it doesn't need anything from the ASA at that point. As long as the web server is enabled on the ASA, an installed instance of ASDM can connect to it.

Related Solutions

Cisco – ASA FTP Special Character in password issue

The problem here is that the device is interpreting the first @ as the delimiter between the credentials and the FTP server address.

Perhaps configuring the username and password in global-configuration mode and then redirecting the show tech without specifying the credentials would do the trick. Otherwise, and I know this is a wimpy solution, changing the password to not include that one character may be the easiest and perhaps most secure way of working around this issue.

Cisco ASA 5585 SSH LDAP Authentication

EDIT: Oops, I just re-read your question and I believe you are hoping to limit who can SSH to your ASA using the "ldap-attribute-map". As far as I know, the LDAP Attribute Map feature is only used for modifying VPN access, not management access to the ASA itself. I'll leave my original answer below in case you (or anyone else) finds it helpful)

The LDAP attribute map allows you to 'override' policies that are inherited from the "default-group-policy" command in the tunnel group for this particular VPN. So in essence, what you need to do is have it so the default-group-policy allows no access, but group-policy 6 allows full access (or whatever access you desire).

Without seeing the rest of your configuration, its hard to give you exact configurations you will need, but here is an effective summary:

tunnel-group TG-SVC-VPN type remote-access
tunnel-group TG-SVC-VPN general-attributes
  authentication-server-group LDAP_mybusinessda
  default-group-policy GP-SVC-NO-ACCESS
tunnel-group TG-SVC-VPN webvpn-attributes
  group-alias Default enable

group-policy GP-SVC-NO-ACCESS internal
group-policy GP-SVC-NO-ACCESS attributes
  vpn-simultaneous-logins 0

group-policy 6 internal
group-policy 6 attributes
  vpn-simultaneous-logins 1
  [vpn-filter ...]
  [ip pool ...]
  [etc]

This will make it so that anyone that authenticates against your tunnel group is not allowed to connect... EXCEPT if they match your LDAP attribute map which overrides the "simultaneous logins" setting from 0 to 1.

Best Answer

Related Solutions

Cisco – ASA FTP Special Character in password issue

Cisco ASA 5585 SSH LDAP Authentication

Related Topic