topic How to completely disable SHUN? in Network Security

How to completely disable SHUN?

ja raju — Tue, 12 Mar 2019 02:12:05 GMT

Hi there,

I have an ASA5510 running Software Version 8.4(4)5. I notice that my users complain that they lose connection to a particular server behind the firewall for about an hour and then they're able to connect normally.

I did some checking and i found out that the server gets shunned for about an hour, prevent access to it.

Is there a way to completely disable the shun 'feature' on the ASA?

Thanks in advanced

How to completely disable SHUN?

Julio Carvajal — Mon, 15 Jul 2013 06:58:46 GMT

Hello Ja,

This is due to treath detection as this is done dinamically,

So you will need to disable scanning and treath detection

U could use the following command to do a filter :

threat-detection scanning-threat shun except ip-address 10.1.1.0 255.255.255

But if u really want to remove it just add a no in front of the treath detection scanning-threath config,

For Networking Posts check my blog at http://laguiadelnetworking.com/

Cheers,

Julio Carvajal Segura

How to completely disable SHUN?

ja raju — Mon, 15 Jul 2013 08:30:45 GMT

Hi! Thanks, i'll test it out and respond here.