cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
601
Views
0
Helpful
1
Replies

Dump questions about MARS

da_heizhu
Level 1
Level 1

Hi Experts,

I have a few dump questions regarding MARS and hope someone can help me on those:

1. Does MARS work like a netflow collector? If yes, how to see the netflow statistic of a device registered in MARS?

2. How does MARS make use of the netflow information if it is not a netflow collector? The only thing i can think of is the resource monitoring. However i have tested the resource monitoring working even without netflow being sent to MARS. Apparently the resource monitoring makes use of SNMP?

4. how to verify that MARS is receiving netflow from a device?

4. How to configure email alert for all the system define rules in batch? I can only do it one by one by adding "action" to the rules, which is very time consuming.

thank you for your advise.

Best regards,

DHZ

1 Reply 1

didyap
Level 6
Level 6

Have you seen this URL for Configuring MARS and the Cisco ASA Adaptive Security Appliances

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/device/configuration/guide/chAsa8x.html