I've been interested in implementing MARS on my system. I've been reading up on it and am wondering if NetFlow is something that comes with an IOS, or with MARS, or if it's something that I have to buy separately.
Netflow is something that is configured on a layer 3 device. You would have to check the license features on those routers or switches.
Cisco MARS is collector of netflow. Check the admin section for port configuration. Cisco MARS makes use of the netflow for network behaivor analysis. Netflow is generally used for network management but contains information that can be used by a security event manager like Cisco MARS.
Check out the following chapter for Cisco MARS on netflow.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...