Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

MARS SNMP alerts

Hi - I'm not very familiar with MARS and I'm trying to get SNMP messages sent to a NetView box when MARS identifies a High/Red alert. I created a rule that says send any of these, from and to any device, to our NetView server but so far none have arrived. (We don't get many but there appears to be at least one Red alert/day.) Would it send the alert if it's Red but turns out to be a false positive? I also tried changing an existing rule that gets triggered a lot (ARP poisoning)just to see if it would send the snmp msg but that didn't work either. The communication is fine between the boxes. I don't know what else to check. Any help will be greatly appreciated! Thanks.

3 REPLIES
New Member

Re: MARS SNMP alerts

It was rebooted and it's working now.

Silver

Re: MARS SNMP alerts

Thanks for the update. It confirms what I have found out from past experience with Cisco Security appliances:

When in doubt regarding a problem that you think you are approaching correctly, and if you have a Maintenance Window, a reboot is a good choice of action.

At minimum, once the reboot is complete you will know that a reboot was not the issue.

New Member

Re: MARS SNMP alerts

I guess I thought it would behave better than this! for example, I changed a rule to send me xml notification and it wouldn't "stick" until I rebooted it. Not too impressive :)

Thanks for the feedback.

147
Views
0
Helpful
3
Replies