Stijn Vanveerdeghem Wed, 07/21/2010 - 13:20
User Badges:

Hi,


You can find the Mars 6.0 compatibility guide here:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/compatibility/local_controller/dtlc60x.html


Are you refering to the standalone Mcafee total protection, or Mcafee total protection centrally managed from  McAfee's  ePolicy Orchestrator (ePO) web-based server console ?


Mars does support McAfee ePO 3.5,3.6 and 4.0.as reporting devices.  This means that MARS has parsers specifically written to understand and parse messages coming from those platforms.


Stijn

cvilleme Wed, 07/21/2010 - 13:28
User Badges:
  • Cisco Employee,

It does not appear that MARS natively supports McAfee Total Protection v 4.5.  See the link below for the complete list of hardware and software natively supported by MARS:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/compatibility/local_controller/dtlc60x.html


The only listed McAfee antivirus products are: McAfee ePolicy Orchestrator versions 3.5, 3.6, and 4.0, and McAfee VirusScan version 8.x.  Please note that for both of these two listed supported McAfee antivirus products, the events sent to MARS are sent as SNMP traps from the ePolicy Orchestrator server as opposed to being sent by the agent hosts themselves directly to MARS.


Regards,

Chris

Actions

This Discussion