Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,I've configured MARS and CSM to communicate as per http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.0/user/guide/combo/monidiag.html#wp837325All I want to do is view the fired signature off the CSM via MARS.My credentials ...
Hello,Is it possible to turn on and dictate the length of packet decodes on the sensor?For example I do not get a decode for invalid netbios name(3357), but do for Windows Image color Management (6984).exmaple: context: fromAttacker: 000000 0...
Hi all,I've been living with MARS for almost a year now and it's still bugging me about the correlation, and I can't seem to get to the bottom of it.My expectation is that a rule should fire whan a security incident occurs.My observation of MARS is o...
Hi All.I'm struggling to find a definitive answer or reason for some of the configuration IPS signature statuses.What does the enabled setting in a rule actually mean in relation to retired and obsolete rules?I have lots of rules which are enabled bu...
