Where to place CS-MARS in Network

[thomasandy32]

Hello Guys,

I'm not familar CS-MARS  but i have read the below book,

Cisco.Press.Security.Threat.Mitigation.And.Response.Understanding.Cisco.Security.Mars,

Am not sure where is the right place to keep the CS-MARS in the network, By reading this book what i understand is the DMZ interface.????????????   pls correct me if am wrong.

Any cisco link or understandable diagram where i can get the proper professional points what shld be enable for CS-MARS.

Thanks,

[Collin Clark]

Since MARS is collecting information about your network traffic, the layout, etc, it should be placed into your management network. If you do this all that important information will not traverse your data networks which are susceptible to packet captures. You can also restrict access to the device with an ACL on the VLAN interface allowing only the necessary personnel to the WebUI.

Hope that helps.

[clausonna]

"Where to place CS-MARS"

How about on the loading dock or the dumpster?  Sorry, but the love is gone..