Security Monitoring, Analysis and Response System with MARS 25 Local Controller Appliance

More From: Cisco
Item #: 8449128
Mfr. Part#: CS-MARS-25-K9
Availability: On Order
Est. Ship: Call for Availability
Security Monitoring, Analysis and Response System with MARS 25 Local Controller Appliance - CS-MARS-25-K9
  • Remote Management over HTTP, HTTPS, SNMP, Telnet

Cisco Security MARS is a security threat mitigation (STM) system. It delivers a range of information about your networks' health as reported by devices in your networks. It processes raw events from your reporting devices, sessionizes them across different devices, evaluates for matching inspection rules (system and user-defined), identifies false positives and consolidates information using diagrams, charts, queries, reports and rules.

The MARS system operates at distinct and separate levels based on how much information is provided about your networks' reporting devices. At its most basic level, MARS functions as a syslog server. As you add information about reporting devices, MARS begins to sessionize the raw data, and after you configure additional reporting devices and enable the more verbose reporting features, it presents a much more comprehensive view of your network, from which you can quickly drill-down to a specific MAC address, for example.

The Local Controller model 25 receives and pulls data from reporting devices, such as firewalls, routers, intrusion detection/prevention systems, and vulnerability assessment systems. Based on the data obtained from those devices, and the level of integration with them, MARS can present you with suggested mitigation rules for detected attacks and, in some cases, push those rules to the mitigation device, which is a network device that contains the attack by restricting network access to the infected hosts.

Ordering Information

Price:
$11,959.01
Quantity: