Cisco Secure Intrusion Detection System








9.4
Event Viewer and IP Blocking



9.4.4
Removing the blocked host or network





To
remove a host, network, or all devices being blocked by a Sensor, perform the following steps:



Step
1
On
the Event Viewer, select the Sensor on the Connection Status
Pane or select an alarm generated by that Sensor.


Step
2
Choose
Actions>Remove Block>Host, or Actions>Remove
Block>Network, or Actions>Remove Block>All
from the Event Viewer menu. The Removing Shun of Hosts window
opens, displaying the status of the remove block command.