Completely disabling Cisco ASA threat detection

[tmcnetxxx]

Hi all,

On a Cisco ASA5510, Version 8.2(1) with ADSM v. 6.2(1) we have this threat detection setting because we'd like like to allow all traffic through at this time:

Would it be correct to assume that this setting will not block any traffic that may normally be considered a threat? We assume the 'Enable Scanning' setting checked by itself just scans the traffic but takes no action.

[Vibhor Amrodia · Accepted solution]

Yes you are correct. It will not block any IP's until you have the "shun" keyword.

Thanks and Regards,

Vibhor Amrodia