Shunned devices on ASDM?

[ryabutler]

Is there a way to view a list of shunned hosts through the ASDM including a way to unshun a host from the ASDM only?

I don't think so, but wanted to check.

Thank you!

- rya

[PAUL GILBERT ARIAS]

if you refer to the shun caused by the threat-detection you can view it on the dashboard. Check this link:

http://www.cisco.com/en/US/partner/docs/security/asa/asa84/asdm64/configuration_guide/protect_threat.html#wp1104293

[ryabutler]

Thanks Paul.

I did notice that before and it doesn't display it in an organized manner.  It's basically mixed in with everything else detected.  Also it doesn't provide a way for unblocking a user.  You have to simply .... wait until the shunned expires if you want to strickly use the ASDM application.

This is why we never turn on scanning detection with threat detection because we constantly see users being blocked for doing simply tasks on the Internet like going to cisco.com.

Thanks again for putting in the time for responding to my post.

-rya

[miguel.martinez]

you can remove the shunned devices from CLI.