Automated attack mitigation with IPS and MARS

[johnson-richard]

Hi,

I was wondering if anyone could explain how a MARS alert can automatically update IPS signatures (within an ASA) to isolate the threat.

This is stated as a feature in the MARS datasheet but the config documentation does not appear to show the process.

Thanks

[didyap]

Follow the URL for the configuring the Cisco Security MARS Local Controller which will help you. :

http://www.cisco.com/en/US/docs/security/security_management/cs-mars/4.3/user/guide/local_controller/cfgidsn.html