Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

MARS and IPS updating

If I enable automatic signature updates on our IPS module, is it possible for an alert to be sent to Cisco MARS indicating that an update took place?

1 REPLY
Anonymous
N/A

Re: MARS and IPS updating

If the signature actions are correctly configured, MARS can display the trigger packet information for the first event that fires a signature on a Cisco IDS or IPS device. MARS is also able to pull the IP log data from Cisco IDS and IPS devices, however, this operation is system intensive. Therefore, you should select the set of signatures that generate IP log data carefully.

156
Views
0
Helpful
1
Replies
CreatePlease to create content