The integration depends on the MARS model number and the version of software running on the model. The CS-MARS focuses more on the network traffic than it does the specific ALCs on the networking devices reporting to it. As such, you could not create a rule that looked for a specific ACL change on a router, but instead could create a rule that looked for the forbidden traffic.