Cisco MARS 6.0.7 Now Available

Cisco have released MARS version 6.0.7

You can read the release notes HERE

Changes and Enhancements

The following enhancement exists in Cisco Security MARS, Release 6.0.7:

•Support for Windows 2008—Cisco Security MARS provides agent based, native log support for Windows 2008 server hosts. Users can send syslog to CS-MARS by installing a Snare agent on their Windows 2008 server hosts.

•Support for Windows IIS 7—Cisco Security MARS provides support for IIS 7 on Windows 2008 servers.

Enjoy :-)

Cisco ASA Secure Logging and MARS

Doug McKillip, a Global Knowledge Instructor, has created a white paper, "Using Syslog Effectively for Security Troubleshooting".

Part of this whitepaper, details using The Cisco ASA Secure Logging feature, over TCP to Cisco MARS.

You can get access to this whitepaper HERE.

Further info on secure logging and the ASA, can be found here, in the  Cisco ASA 8.2 CLI Guide.