There is a new Net Pro, ask the Expert discussion, regarding the new features is MARS 4.3.1
This is with Gary Halleen one of the authors of, the latest Cisco MARS Book.
This is with Gary Halleen one of the authors of, the latest Cisco MARS Book.
You can find this HERE.
Posts
1 comment:
is there any way to have MARS archive full events (needed for compliance) from checkpoint and cisco IPS devices?
i cant see much more than a short message with just a ruleno and action. NO srcip,dstip,dstport or anything else.
am i doing something wrong?
Post a Comment