Shun Automatically Turned-on for Cisco Call Manager

[ray_stone]

Hello Experts, we have cisco ASA 5505 running for our branch office and STS tunnel is configured for remote site. The cisco call manager is placed on remote site. Yesterday, we experienced that all conference calls were got it disconnected automatically and no reply messages were recieving while doing ping to call manager server. I logged into the firewall and saw that the shun automatically turned-on for CCM server and when I manually turned-off then cisco IP phone were got it up. Can anyone explain why it was turned-on for CCM Server.

[Panos Kampanakis]

Ray,

Check if the ASA has threat detection with shun option enabled.

If not then probably you have an IPS that has the ASA configured and identified the CCM as an attached and went in and shunned it.

Or a user logged into the ASA and shunned the CM (which I doubt).

I hope it helps.

PK