It seems there is a bug in SDM with relation to the current IOS image which prevents SDM from recognising that the 857 does not support the zone based firewall or class-map. This is not a problem with earlier IOS versions. The work around is to connect via the console