What non cisco devices can be monitored by MARS

Unanswered Question
Feb 25th, 2008
User Badges:

We are in the process or purchasing the MARS 110R and was wondering what other non cisco devices on our network can be monitored by MARS for intance our exchange servers.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
mhellman Mon, 02/25/2008 - 11:42
User Badges:
  • Blue, 1500 points or more

You can monitor the security event logs (as well as most other windows event logs) using MARS. I'm not sure it understands Exchange specific event logs, but it should be able to parse the normal authentications that take place in an Exchange environment (and are logged to the security event log). Here is the list:


http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/compatibility/local_controller/dtlc43x.html

matt_nels Mon, 02/25/2008 - 12:33
User Badges:

If you have a Cisco CSA deployment, you could install CSA on the exchange server and that information can be fed to MARs as well.

pmccubbin Tue, 02/26/2008 - 03:56
User Badges:
  • Silver, 250 points or more

I just wanted to add to Matt's comment about CSA and MARS that all the CSA agents will be automatically discovered by MARs. This can be significant time saver when you consider the potential number of end users and servers with CSA installed. It's a nice feature which works like a champ and gives administrators extra insight into the non-Cisco devices on their networks.

Actions

This Discussion