SANS Reading Room Paper

I came across this paper below the other day, that`s worth a read to MARS newbies, in the SANS reading room.

Entitled "Configuring and Tuning Cisco CS-MARS", this paper was produced by John Jarocki, for his GCIA Qualification.

The paper is based on an older version of MARS, so note there have been some improvements like Dynamic IPS Updates since its creation.

On another note, if you have something to share with the MARS community, or would like create a guest article for the Blog please get in touch, or join the Cisco MARS user Group, where we have over 620 users now.