MARS and overlapping Networks

costin.vilcu · ‎06-23-2008

Hi. Does someone have a solution to this:

A service provider offers firewalls to his clients. Every asa si monitored by a MARS. If the clients use the same subnets in their Local networks, how can this be solved in MARS.

I mean, in the topology dashboard the firewalls will apear as connected on their inside interfaces, and in the Incident Dashboard i will see that, let's say an atacker with 10.x.x.1 tried something, but i will not know which which client (as they both have 10.x.x.x in their local lans).

Can this be solved somehow?

Thank you,

Costin

Farrukh Haroon · ‎06-23-2008

Hello Costin

To my knowledge there is no way to achive this. You have to buy separate MARS boxes for this. Cisco is offering some models with relatively less cost (based on EPS) now which you can use as local controllers. Then aggregate them to one Global Controller.

Regards

Farrukh