Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

MASR & IPS

Can anyone clearly differenciate between the MARS & IPS?

2 REPLIES
Gold

Re: MASR & IPS

MARS is a centralized logging device with additional functionality. IPS is an intrusion detection/prevention appliance.

is that enough, or were you hoping for more insight?

Bronze

Re: MASR & IPS

Mars is a correlation engine. i.e it takes logs from all devices in the network like routers,switches,IPS,application servers,firewalls etc. After taking the logs, it correlates the events and creates an incident out of those events. In Mars you also can see the actual path of the attack and you can mitigate the attack by sending Mars recommended conifguration to the devices.

HTH

zubair

85
Views
0
Helpful
2
Replies
CreatePlease to create content