I think it's important to note that the key words are "up to" so many EPS. It's my experience that once you get up to around 12-15 million events per day, the MARS 50 gets slugish in the interface. It isn't hard to get to this level, especially whe...
hello,I believe you are going to need to filter on both devices. I suggest tunning the sensors lightly - only tune out the obvious issues that you never expect to be a problem. Then I would see how things go with your network and the MARS and do an...
I find you can take a few major indicators to at least get a range. The big ones are how many firewalls do you have, and how busy are the links they are securing. Many organizations have one firewall on their Internet connection with some hosts in ...