ASA 5550 and deny port scanning

[andrey.v.tyurin]

Hi all!

Help! How can I deny port scan on the ASA. I mean when someone from outside interface begin scanning port of the host that is located in the inside interface.

[christianschorr]

threat-detection scanning-threat

or

threat-detection scanning-threat shun

Kind regards

[cisco24x7]

I thought when you enable this feature on the

ASA, CPU and memory utilization will go up very

high. I heard that most people recommend that

feature should be disabled on the ASA.

[andrey.v.tyurin]

I have another question.What kind of mistake I see in the log server?