Shunning refers to the functionality of the IDS sensor to dynamically create and ACL that denies the attacker access and apply it to a specific interface. For example, you would have it setup that when the sensor sees an attack from 65.65.65.65 it would create and ACL denying 65.65.65.65 access and apply it to the outside interface of a router.
Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=46683&t=46639 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]