Cisco Security Monitoring, Analysis, and Response System

Features

• Learns the topology, configuration and behavior of your environment
• Automatically updates knowledge of new Cisco IPS signatures, for up to the minute reporting on your environment
• Promotes awareness of environmental anomalies with network behavior analysis using NetFlow and syslog
• Provides simple access to audit compliance reports with more than 150 ready-to-use customizable reports
• Makes precise recommendations for threat mitigation, including the ability to visualize the attack path and identify the source of the threat with detailed topological graphs that simplify security response at Layer 2 and Layer 3
• Integrates with the Cisco Security Manager to correlate security events with the configured firewall rules and intrusion prevention system signatures that can affect the security event.

  Supported Types

• network devices
• security devices and applications
• hosts
• server-based applications
• * Note: Web logging is only supported on hosts running Microsoft IIS on Windows, Apache on Solaris or Linux, or iPlanet on Solaris.
• ** Note: Hosts running Microsoft IIS on Windows need to run InterSect Alliance SNARE for IIS, from which MARS receives web log data.
• network traffic.