IDS Manual blocking and PIX shunning

[m.mohanasundaram]

Hello all,

I am trying to configure "manual blocking" on the IDS sensor to block some hosts and networks. PIX is able to shun the hosts but not the networks. The "show shun" command shows only the hosts that are shunned and does not show any "networks" that I have manually blocked.

Any thoughts?

Another question: Once the shun is applied, and if I issue "clear shun" command on PIX, it removes all the shun, including the manual shuns. OK. When will the shun be again applied to PIX?

Thanks in Advance,

Mohan

[mchin345]

PIX always shuns 'hosts' or 'connections' and not networks. I think that the network shun is applicable only for routers and switches.