threat-detection rate scanning-threat

Gian Paolo · ‎05-22-2008

Hello,

I'm configuring am ASA 5505 in tranparent mode. I'm tuning threat detection thresholds to reduce unuseful log messages.

I type the following commands:

no threat-detection rate scanning-threat rate-interval 600 average-rate 5 burst-rate 10

threat-detection rate scanning-threat rate-interval 600 average-rate 50 burst-rate 75

Then I copy run start. I've had to reboot the ASA, but this configuration is gone! I've applied again the same commands, reboot and... gone! It seems thath this configuration cannot be saved!

I can see my commands applied to the running config:

sh running-config all threat-detection | incl scanning

and I can see the same values I've typed in running configuration but after the reboot they're gone.

System image file is "disk0:/asa802-k8.bin"

Config file at boot was "startup-config"

Hardware: ASA5505, 256 MB RAM, CPU Geode 500 MHz

If somebody has the same machine/software version and can try. Thanks

mchin345 · ‎05-28-2008

To view the hosts that the security appliance decides are attackers (including hosts on the shun list), and to view the hosts that are the target of an attack, enter the following command:

hostname# show threat-detection scanning-threat [attacker | target]