MARS Configuration

[h.parsons]

Can someone tell me the advantages of having all network devices in the MARS configuration. Do the layer 2 access switches provide any relevant information?

[cyee]

We find it useful to obtain alarms when certain interfaces on switches go up/down ... e.g., critical servers, net devices, etc.

[Fernando_Meza]

Hi ... yes they do but it depends of what you are looking to achieve using teh MARS .. I suggest you to have a look at the Webcast on the below link for a better idea of what you can do ..

http://www.cisco.com/en/US/products/ps6241/index.html

I hope it helps .. please rate it if it does !!

[wiluszm]

We actually find logging our switches extremely beneficial. We use port security and all lockouts are reported on MARS and notify the on-call e-mail. We also found that it's beneficial to mitigation as it can narrow an attackers source direclty to the switchport. Thus, we've been able to have MARS turn off a switchport if we're being attacked from a switch monitored by MARS.