cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
245
Views
0
Helpful
1
Replies

Cisco MARS auto-mitigation

hermanaccd
Level 1
Level 1

Hi,

Is Cisco MARS capable of auto-mitigation, such as applying ACLs or shutting switch ports automatically if anomalous behavior is detected?

Can MARS mitigate automatically without administrator intervention?

Thank you.

1 Reply 1

pmccubbin
Level 5
Level 5

No, MARS does not mitigate automatically without administrator intervention.

MARS correlates all its data to determine the best device and command that can be used to mitigate an attack. It then presents you with the mitigation command it has determined will best stop the attack. There is also a single-click option to deploy the command to the mitigation device, for instance a router, switch, firewall, IPS or ISR router.

Hope this helps.