Well its official, Cisco have announced the End of Life for Cisco MARS.
"Cisco announces the end-of-sale and end-of life dates for the Cisco Security Monitoring, Analysis, and Response System. The last day to order the affected product(s) is June 3, 2011."
You can read the official End of Life/End of Sales notification HERE.
The end of an Era, for probably the largest deployed SIEM tool out there.
I think its also important to note, Cisco' stance on future SIEM type products from the release notes "There is no replacement available for the Cisco Security Monitoring, Analysis, and Response System at this time."
Happy hunting for a replacement!
Subscribe to:
Post Comments (Atom)
Posts
5 comments:
No surprises here then, Cisco told our company months ago, and tried to get us to go the CSM route.
But since we have lots of other vendors kit, we have decided to test products, like RSA, AccelOps and Q1.
RSA we have junked, its worse than MARS! now onto the other 3.
http://www.reddit.com/r/netsec/comments/8gxw7/here_is_a_propaganda_video_on_rsa_envision_i/
A great review on RSA above, I agree.
checkout the all-in-one solution from accelops too. It has all the next gen functionality for a SIEM plus availability and performance monitoring..We were pretty impressed with that solution.
I think SPLUNK might have most of the features required for a good SIEM platform. Extensible and scalable. There are SPLUNK Apps for Cisco products which increase the filtering and reporting capabilities around those products.
I used to maintain an RSA . . . I am with you . . . clunky.
Q1 is cool too . . . even when its sold as Dragon by Enterasys.
In about an hour from now I'm training the Cisco sales team on how to position LogLogic 5 running on Cisco blades as a replacement for MARS. Should be fun...
Post a Comment