I found out MARS finally supported IPS 6.0

Answered Question
Correct Answer
mhellman Mon, 09/24/2007 - 09:45

lol. fwiw, the version that supports v6 is supposedly still on track for this month. I can't wait to find out what support for v6 actually means;-)

clausonna Thu, 09/27/2007 - 11:29

Mars 4.3 / 5.3 is out as of today. IPS v6 support, including dynamic signature downloads from CCO and automatic support:

From the Release notes:

Download new signatures from CCO and correctly process and categorize received events that match those signatures, which includes them in inspection rules and reports. These updates provides event normalization and event group mapping, and they enable your MARS Appliance to parse Day Zero signatures from the IPS devices.

This is good news, but the MARS team should be ashamed at how long its taken them to catch up, considering that IPS 6.0 has been out for almost a YEAR. I can't wait for IPS 7.0 to come out in a few months(?), so we're right back at square one again..


This Discussion