I'm getting a connection refused message when I try to log in to my asa 5520 using secure CRT (SSH). I think I need to reset crypto key. How do I do that from ASDM?

Why not search and read. crypto key generate rsa command The Cisco Learning Network

ASA's log is usualy stored localy on ASA itself, so easiest way to export that log is to go with telnet/ssh/console on it, do a command : show logging and copy/paste output into a new file.
but beware - this log is really short and as soon as ASA is rebooted - it's gone.
you could set asa to log to a syslog server (free on linux/freebsd or for windows use KIWI app).
that way all ASA log output is stored on pc/server running your syslog server.

What version of software are you running? I have noticed issue with ssh on version 8.2(3) and below.

You can try to remove all ssh access and then add it back. Also you can try zeroizing and regenerating the crypto key.

mode exec user Router)
ping ip
show ip route
show version
traceroute ip

mode exec priveligiado
show arp
show interface
show protcols
show ip protocols
show startup-config
erase startup-config
reload

If you are going for factory reset use the following commands

asa>enable
asa#write erase
asa#reload

Dont save the configuration when it prompts for it.

if you want to restore the configuration from the backup

1. You need to have a TFTP server
2. Locate the config file on your TFTP server
3. TFTP server should be reachable from ASA

then

asa#copy tftp flash

give the tftp server ip address
give the configuration file name (as exactly on the TFTP server)

reload

Here's a real simple problem to your remote access problems.
Go to: http://www.logmein.com
Sign up for a free acct, download/install their free software on your Server.
Now go over to your laptop, login to your new logmein acct.
In the next page, you'll see your Server listed. Click on it - follow instructions to connect.
This will tunnel through whatever stuff you have on your network!
Trust me - esp. in your scenario, this is *by far* the *simplest remote connect you'll ever perform! And it just .... works! Everytime.

gurutim

You seem to have the last resort (o.o.o.o) set to VLAN1 which is set as an inside interface.
Is VLAN1 connected to the outside router or internet backbone?
If not, change the last resort to the outside Ethernet port.

undo the dmz and forward the ports 22 for ssh and any other services you need to the cisco. Ok dmz is not good... 3com calls port forwarders virtual servers just add what you need there... hope that helps.

I had this same issue on my ASA 5520.

1. Copy the config and IOS image to a tftp server.
2. Format flash (disk0)
3. set rommon server, ip addy, and file settings.
4. tftpdnld
5. Once the system has booted to the image copy the asa image file, asdm image file, and config to flash
6. configure asdm image default location and reload