Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Log & Event Manager (LEM) > LEM - Knowledgebase Articles > How does Cisco Block IP active response work

How does Cisco Block IP active response work

Table of contents

Updated March 10, 2017

Overview

The LEM can block IP addresses on firewalls. 

Environment

  • LEM All versions
  • Cisco PIX and ASA firewalls

Detail

When LEM uses the Block IP active response, it connects to the firewall over ssh or telnet and issues a shun command like this:
shun {IP_Address}
This will cause the ASA to block all traffic originating at the specified ip address.

 

 

Last modified

Tags

Classifications

Public