Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We're seeing a lot of these alerts in the IPS and MARS. I've made a few packet captures, but have been unable to completely identify the issue. If I create a packet capture, I see an occasional duplicate ACK, but those same events don't appear to t...
About a month ago, we added our Checkpoint firewall to MARS as well as the 2 Firewall agents who reported to the device. The devices were recognized and running properly. At some point in the last week, the Checkpoint management server lost it's id...
Hi all, I've been doing my first implementation for past week and I've come across a few questions that I haven't found the answers to (yet). While scouring the user guides and Google, I figured I might as well ask the forums to expedite my research...
Another question to tack on to this thread, I hope nobody minds: 5) Our MARS is collecting data from multiple sites on our MPLS cloud, however the topology within MARS is not aware of the connection between each of the sites. The cloud is not manag...
Thanks for the replies. I was able to add the device and schedule the topology updates, but short of watching the Foundstone database for incoming requests from MARS, I'm unable to verify that MARS is actually querying and using vulnerability infor...