Thursday, November 29, 2007

New MARS Ask the Expert Discussion

There is a new Net Pro, ask the Expert discussion, regarding the new features is MARS 4.3.1

This is with Gary Halleen one of the authors of, the latest Cisco MARS Book.

You can find this HERE.

1 comment:

martian said...

is there any way to have MARS archive full events (needed for compliance) from checkpoint and cisco IPS devices?

i cant see much more than a short message with just a ruleno and action. NO srcip,dstip,dstport or anything else.

am i doing something wrong?