Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I wanted to start a thread in the "CSC Ideas" area based on another thread started in the "Security > IPS-IDS" forum. The original thread was for a "Feature Suggestion" regarding sharing custom signatures for the IPS-IDS devices:https://supportforum...
I've seen several threads over the last couple of months suggesting the submission of enhancement requests or feature requests. Before bothering my account team with submitting these kinds of items, I was wondering:Now that the EoS/EoL for MARS has ...
After digging through the standard signature definitions, I've come across some inconsistencies and possible errors. Should I open a TAC case to address these? Just posts in this forum? Or is there some other way to have these questions addressed?...
For some of the IPS-IDS signatures, the description says "signature is only available on the 5.x platform". Sometimes it adds "obseletes signature <X> on the 5.x platform."Does this actually mean "5.x OR LATER", such as a sensor running 7.x? Or is i...
It looks like ASDM 6.2(2)F for the FWSM was posted on CCO last Friday (Oct 22). However, there's no accompanying release notes. Also, the ASDM 6.2(x)F release notes on the support site have not been updated since March.Any indication of what chang...
A couple of notes:the Juniper STRM is an OEM version of QRadar, a SIEM product made by Q1 Labsthe same product (QRadar) is also OEM'd by Enterasys as their "Dragon Security Command Console"
There is no CS-MARS replacement product offered by Cisco directly. They left that market segment when they killed MARS off. What they do instead is publish a list of "Technology Partners" that offer SIEM solutions recommended for use in Cisco environ...
Quick note: this should really be posted as a discussion item, rather than a document. I'd recommend moving it, or simply deleting/recreating the post there. When it's a post containing a question, or requesting help/information, you're more likely...
GT --It's possible to configure MARS to act as a syslog relay, but there are some limitations. The relay feature is covered in Chapter 3 of the "User Guide for CS-MARS Local and Global Controllers".Specifically, check the section titled "Syslog Rela...
