FTD Prevent IP addresses from being shunned

[Cory Anderson]

I have some firewalls running FDM locally and not managed by an FMC that keep shunning specific IP Addresses. How do I configure the FTD to prevent these IP addresses from being shunned like you can in an ASA or with the FMC?

[MHM Cisco World]

Can you more elaborate?

Thanks 

MHM

[Cory Anderson]

yes, the firewalls have site to site VPNs. After a period of time with high bandwidth utilization, an endpoint will stop forwarding traffic. If I run the command "show threat-detection shun"  it shows that the IP address is shunned. If I clear the shun, it starts forwarding traffic again.  What other information would be helpful?

[MHM Cisco World]

I know for asa we can prevent ASA to shun specific IP (NOTICE that you need to make sure that this IP is not hack or under attack)
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113685-asa-threat-detection.html

for your case you run FTD manage by FDM ?
MHM

[Cory Anderson]

Yes, managed by FDM and not FMC. I've done this through the ASA but I don't see how to do it with the FDM.

[MHM Cisco World]

I will check if we can do it via flexconfig in FDM or not.
I will update you soon 
thanks 
MHM