Re: How do I use Cisco MARS to monitor two ASA (active/stby) wit
In Active/Standby mode, ASA logically exists as single firewall. Traffic only flows via active unit.
I think you need to add only the Active IP Address, not both. So when you add 2xIPs, CS-MARS still sees them as single device.That's why CS-MARS complaint about the duplicate/ existance of similar device.
This is also true if you have a router or switches (like C6509) with multiple interfaces, and you want to add/register all interfaces using their individual interfaces IPs, CS-MARS will also produced similar complaint.
Logically, when active unit become unavailable and the standby unit resume the firewalling tasks using the same Active IP Address as well as MAC Address. Other devices/hosts will not aware of this, including CS-MARS.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...