topic Re: Shunned devices on ASDM? in Network Security

Shunned devices on ASDM?

ryabutler — Mon, 11 Mar 2019 20:06:31 GMT

Is there a way to view a list of shunned hosts through the ASDM including a way to unshun a host from the ASDM only?

I don't think so, but wanted to check.

Thank you!

- rya

Re: Shunned devices on ASDM?

PAUL GILBERT ARIAS — Mon, 14 Mar 2011 17:37:47 GMT

if you refer to the shun caused by the threat-detection you can view it on the dashboard. Check this link:

http://www.cisco.com/en/US/partner/docs/security/asa/asa84/asdm64/configuration_guide/protect_threat.html#wp1104293

Re: Shunned devices on ASDM?

ryabutler — Mon, 14 Mar 2011 23:56:18 GMT

Thanks Paul.

I did notice that before and it doesn't display it in an organized manner. It's basically mixed in with everything else detected. Also it doesn't provide a way for unblocking a user. You have to simply .... wait until the shunned expires if you want to strickly use the ASDM application.

This is why we never turn on scanning detection with threat detection because we constantly see users being blocked for doing simply tasks on the Internet like going to cisco.com.

Thanks again for putting in the time for responding to my post.

-rya

Re: Shunned devices on ASDM?

miguel.martinez — Tue, 15 Mar 2011 00:02:50 GMT

you can remove the shunned devices from CLI.