03-18-2008 11:07 AM - edited 03-10-2019 01:41 PM
MARS uses AMS to retrieve/parse messages from older versions of Symantec Antivirus. AMS doesn't exist in the newest version (aka Symantec Endpoint Protection). Is there a way to integrate SEP messages into MARS? If not, does anyone know if Cisco has any plans to support SEP with MARS?
05-29-2008 12:49 PM
Hi -
Supporting Symantec Endpoint Protection is under consideration for a future release.
Have you written a custom parser for this in the meantime?
thxs
peter
05-29-2008 12:52 PM
No, we have not. That would've been outside the scope/budget. After discussing with a few Cisco TACs, we determined that it would be more cost effective to wait for the new release.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: