Configure Threat Detection for Remote Access VPN on Secure Firewall ASA

[Cisco Document Team]

The Cisco Document Team has posted an article.

This document describes the process of configuring threat-detection capabilities for Remote Access VPN on Cisco Secure Firewall ASA.

Know of something that needs documenting? Share a new document request to doc-ic-feedback@cisco.com

Your input helps! If you find an issue specific to a document, please let us know. Remember to provide as much detail as possible when submitting a request or feedback on an existing document including information regarding the section, area, or issue you had with the document and what could be improved.

You can provide feedback in a few ways:

• Using the Feedback button located at the right panel of the corresponding article.
• Submitting your feedback on an existing article or video, or new document request to doc-ic-feedback@cisco.com.
• If you are opening a TAC (Technical Assistance Center) case, you can notify your engineer of the gap or missing content and they can create a request on your behalf.

See How Cisco TAC is transforming documentation and simplifying self-service in this blog

[jont717]

This feature needs a way to set certain IPs from ever being shunned.  Please add that.  With common CGNAT used by ISPs, our VPN may get hit by the same IP address many times and we need to add that IP address to the ASA to never get shunned by the VPN Threat Detection.