How do you exclude an IP address from Threat Detection in ASA

[uhl_frederick]

Hello,

I run ping scans on certain subnets that may or may not be conneceted to ports on my ASA. I need to exclude my workstation IP address from being flagged as a threat. Anyone know how to do this?

Thanks

Gene

[JORGE RODRIGUEZ · Accepted solution]

Gene,

you may try:

e.i, your host IP conducting scans : 20.20.20.20

threat-detection scanning-threat shun except ip-address 20.20.20.20 255.255.255.255

Go over this link

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/t.html#wp1499634

[rick11]

Hello,

will the exclusion work even if I don't have enabled the shun option yet?

[Florin Barhala]

Is this Firepower related?
Can I quickly "except a host from Firepower scan" with this command?

[rick11]

It's ASA Threat detection feature

[am.]

How to disable/deleted it?