MARS GC

[rohitsharmacisco]

Hi

I have a requirement wherein I have multiple MARS LCs and GC at the Head office. The Head office has couple of IDS/IPS, ASA which I need to monitor. Can I use the same GC for monitoring the local devices in HQ or do I need to buy a LC for HQ for monitoring local devices and GC for monitoring the zones including HQ.

[pmccubbin]

Hi Rohit,

The GC is used to manage the Local Controllers only. It can't monitor devices like IDS/IPS and ASA.

A couple of good books from the Cisco Press:

1. Security Monitoring with Cisco Security MARS by Gary Halleen. This book has a good section on Global Controllers.

2. Security Threat Mitigation and Response by Dale Tesch.

There is also a Google User's Group dedicated to MARS.

Hope this helps.

Paul

[rohitsharmacisco]

Hi Paul

Thanks for your help. That solves my issue.

Regards

Rohit