cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
400
Views
0
Helpful
1
Replies

CS-MARS and IPS Signature Updates?

mcartoz33
Level 1
Level 1

The event "unknown device event type" occurs when the MARS signature list differes from that of the reporting device.

What is the process to update this list on MARS? With routine signature updates for IPS sensors, am I required to wait for an update for MARS also?

I appreciate any clarification anyone can provide. Thanks!

1 Reply 1

rnaydenov
Level 1
Level 1

Generally you have to wait for an update for MARS also.

With the new IPS 6.0 this might not be the case, because I noticed, that a signature may be put in one of the categories that MARS understands.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: