Wednesday, September 17, 2008

Cisco MARS 6.0.1 Release Notes

Thanks to a post in the Cisco MARS User Group , the Release notes for MARS 6.0.1 are now available on Cisco.com

A snippet below, shows the updated on box, vendor sigs....

You can also find, a Migrating Data from Cisco Security MARS 4.x to 6.0.1, document HERE.




ASK THE EXPERT - CS-MARS

Not sure if anyone has seen this, but there is a current "Ask the Expert" series, running on the Netpro forums, on MARS.

Looking at the discussions, it looks like MARS 6.0 will be out by the end of September.

Thursday, September 11, 2008

Fortinet Custom Parsing

Sorry for the lack of posts recently, i`ve been busy....
  • With work....
  • Studying for the CCIE!
  • I got married
  • Went on Honeymoon to Mexico and the USA.
And apart from the above, i`ve been patiently waiting for MARS v6 to be released!

So whats new?

Well thanks to everyone who has sent me the link to the article below...

Sebastian from the Firewall Guru Blog has posted an article, on how to create a custom parser to get MARS to understand some Fortinet events..

Go check it out...