Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We're getting a ton of informational packets (tcp build / teardown) from firewalls here. I can kill this at the source (drop to "notification" level, filter out the build / teardown events, etc.) but would rather not throw this stuff away (good clue...
Hi all - this is maybe a general CCO / support access question, but in this case since it affects ironport I'm posting here.We have several people who may need to contact Cisco for Ironport support issues. We have purchased the boxes and have the s...
We're starting to deploy ASA now to replace some aging / end of life devices (PIX and IDS sensors). Once the network admins set up the required IDS module(s) etc. on the ASA, I can then configure each of them as reporting devices in MARS (I can also...
hi - need a sanity check - we have a dead IDS sensor. that sensor normally talks to MARS server 1.while being replaced, in the interim, the suggestion was made to utilize an unused interface on another IDS sensor (this one currently talks to MARS se...
hi allmy eyes are bleeding from trying to sort out the nuances in the docs regarding data restores.what is the corrent command to restore just the event data (dynamic) from archive? I don't need config or O/S restoredalso, does the restore command s...
Michael - thank you for the very detailed answer. We're using both ASA and FWSM (and a few older PIX in the mix) - so the approach we take may be towards consistency (i.e. not using NSEL in only ASA supports it) - I'm speculating a bit and not sure ...
