[c-nsp] FWSM 3.2 block IP,PORTS via external script.

Jeff Fitzwater jfitz at Princeton.EDU
Mon Aug 20 11:45:53 EDT 2007


New to  FWSM 3.2

We would like to dynamically block IP,PORTS on the FWSM by sending it an 
ACL or "SHUN" commands from an external script.

First... Maybe there is a better or more preferred way to accomplish this.
Second is an ACL or the SHUN command have any drawbacks?

I see that the SHUN can only have one entry per SRC entry, so that may 
be a key factor.



Thanks for any help on this issue.




Jeff Fitzwater
OIT Network Systems
Princeton University





More information about the cisco-nsp mailing list