Where to place CS-MARS in Network

Unanswered Question
Jan 18th, 2010
User Badges:

Hello Guys,


I'm not familar CS-MARS  but i have read the below book,

Cisco.Press.Security.Threat.Mitigation.And.Response.Understanding.Cisco.Security.Mars,


Am not sure where is the right place to keep the CS-MARS in the network, By reading this book what i understand is the DMZ interface.????????????   pls correct me if am wrong.


Any cisco link or understandable diagram where i can get the proper professional points what shld be enable for CS-MARS.


Thanks,

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Collin Clark Mon, 01/18/2010 - 07:04
User Badges:
  • Purple, 4500 points or more

Since MARS is collecting information about your network traffic, the layout, etc, it should be placed into your management network. If you do this all that important information will not traverse your data networks which are susceptible to packet captures. You can also restrict access to the device with an ACL on the VLAN interface allowing only the necessary personnel to the WebUI.


Hope that helps.

clausonna Wed, 01/20/2010 - 05:22
User Badges:
  • Bronze, 100 points or more

"Where to place CS-MARS"


How about on the loading dock or the dumpster?  Sorry, but the love is gone..

Actions

This Discussion