Armor vulnerability scan triggers temporary blacklisting on my NAS

As far as I can tell, every vulnerbilty scan results in the NAS box putting the router   in the doghouse for a few minutes (The NAS logs report a possible attack) and then the router reporting the fact that it was blocked as evidence of a successful DOS/overflow vulnerability.   I understand and even approve of what both devices are doing, but, for instance, when my commercial ASV scanner runs against  our production resources, I can tell the vendor to throttle their probes or stop making  a particular attack on a specific host.   Whitelisting is the wrong  answer, just like I'd never tell my production servers "oh, don't worry about those DMZ hosts - they're totally never going to be owned."