Unanswered Question
Oct 4th, 2007


I have a requirement wherein I have multiple MARS LCs and GC at the Head office. The Head office has couple of IDS/IPS, ASA which I need to monitor. Can I use the same GC for monitoring the local devices in HQ or do I need to buy a LC for HQ for monitoring local devices and GC for monitoring the zones including HQ.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
pmccubbin Thu, 10/04/2007 - 05:08

Hi Rohit,

The GC is used to manage the Local Controllers only. It can't monitor devices like IDS/IPS and ASA.

A couple of good books from the Cisco Press:

1. Security Monitoring with Cisco Security MARS by Gary Halleen. This book has a good section on Global Controllers.

2. Security Threat Mitigation and Response by Dale Tesch.

There is also a Google User's Group dedicated to MARS.

Hope this helps.



This Discussion