MARS topology in non-Cisco environment

milee1420 · ‎03-05-2008

In a heterogeneous, non-Cisco environment (e.g. Dell switches, Sidewinder firewall), is it possible to obtain accurate topology/visualization information? If so, how is this accomplished? Any other best-practices/gotchas for getting the most out of MARS in such environment would be helpful as well. Thank you.

mhellman · ‎03-05-2008

We don't really have any topology information in MARS, and for the most part don't pay much attention to the topology or attack graphs/charts. Don't even use the summary page. We don't use the MARS for anything but collecting events. Maybe I don't know what I'm missing, but we get along just fine without(we even have a mostly Cisco network).