I want to implement MARS in Internet network and the network contain the below devices:
ASA, IPS, internet router, ISG1000, cisco manager, and cisco core switch.
internet network providing internet for all users in the building and i want to monitor the network using MARS and i have more than 2000 users and around 40 access switch.
I am planing to configure the all security devices as reporting devices for MARS appliance plus the core switches and the routers.
I am not sure if this is the best practise for this network to have full monitoring.
Any ideas please can help me.