How do you exclude an IP address from Threat Detection in ASA

Answered Question

Hello,


I run ping scans on certain subnets that may or may not be conneceted to ports on my ASA. I need to exclude my workstation IP address from being flagged as a threat. Anyone know how to do this?


Thanks


Gene


Correct Answer by JORGE RODRIGUEZ about 8 years 2 months ago

Gene,


you may try:


e.i, your host IP conducting scans : 20.20.20.20



threat-detection scanning-threat shun except ip-address 20.20.20.20 255.255.255.255



Go over this link


http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/t.html#wp1499634



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.

Actions

This Discussion