threat-detection on ASA v 8.02

curt · ‎03-13-2008

Hello,

I am trying to enable threat detection with scanning-threat shun. The commands took with the config but when I run any nmap scans the ASA does not shun the host. What I am doing wrong?

Thanks,

Curt

abinjola · ‎03-13-2008

show threat-detection statistics

show threat-detection statistics host

does it show anything ?

can you get me sh run | inc threat ?

curt · ‎03-13-2008

I have have attached the 3 outputs that you requested. Thanks for taking the time to look at this.

Curt

abinjola · ‎03-14-2008

You may need to reconfigure the scan rate for ASA to detect the traffic from scanner..

curt · ‎03-14-2008

This was the 2nd config. The first one I had set for scanning. I set the 2nd one for ICMP and tried to ping flood it just to see if it would shun me, but it never did.