Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Cisco MARS auto-mitigation

Hi,

Is Cisco MARS capable of auto-mitigation, such as applying ACLs or shutting switch ports automatically if anomalous behavior is detected?

Can MARS mitigate automatically without administrator intervention?

Thank you.

1 REPLY
Silver

Re: Cisco MARS auto-mitigation

No, MARS does not mitigate automatically without administrator intervention.

MARS correlates all its data to determine the best device and command that can be used to mitigate an attack. It then presents you with the mitigation command it has determined will best stop the attack. There is also a single-click option to deploy the command to the mitigation device, for instance a router, switch, firewall, IPS or ISR router.

Hope this helps.

97
Views
0
Helpful
1
Replies
CreatePlease to create content