cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
460
Views
3
Helpful
1
Replies

correlating vulnerability data

slade_griffin
Level 1
Level 1

I want to tune a standalone MARS and would like to incorporate NMAP and Nessus data to help eliminate some false positives. How do you upload this data to the device and the do the correlation?

1 Reply 1

Farrukh Haroon
VIP Alumni
VIP Alumni

The MARS has a built-in NESSUS but it can't be used to do manual scans. And since Nessus has recently changed their licensing scheme (got more commercial) it will be pretty difficult for Cisco to even provide this feature in the future. Have a look at this post:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=MARS&topic=Discussions&topicID=.2cc04749&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0e5a9

These are the Vulnerability Assessment devices supported by MARS:

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/compatibility/local_controller/dtlc43x.html#wp75289

Please rate if helpful.

Regards

Farrukh