×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Questions about CS-MARS

Unanswered Question
May 15th, 2006
User Badges:

Hi There,


I have CS-MARS 20 and I'm running version 3.4.3 on it.


I have the following questions about the product and I'd appreciate any input; my questions are:


1- I have ISS Proventia in my environment and I'm wondering if it has the same syslog format as the ISS Real Secure product. The reason why I'm asking is because I'm not seeing the Proventia IPS product under the MARS supported product list and would like to check if anybody has tested whether CS-MARS recognize the Proventia messages or not.


2- Is their a way on MARS to check the Hard Disk space left on the product in order to plan archiving?


3- Does MARS stores the received traffic in normalized format or just keep them as raw data and if so how much is the size of the normalized traffic?


Thanks!

Haitham

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
beth-martin Fri, 05/19/2006 - 07:01
User Badges:
  • Bronze, 100 points or more

As far as I know MARS stores the received traffic in normalized format

haithamnofal Sat, 05/20/2006 - 02:15
User Badges:

Hi,


Do you have an idea on the MARS normalized log size? I'm thinking of how should I plan the archiving period of my box?


Any clue on this would be highly appreciated.


Thanks,

Haitham

Actions

This Discussion