End of Sale of Monitoring Analysis and Response (MARS) Products
PDF(121.1 KB) View with Adobe Reader on a variety of devices
Updated:December 30, 2010
Q. What products are covered by this end of sale (EOS) announcement?
A. This EOS announcement covers all Cisco MARS security appliances, software, accessories, and licenses. Products include Cisco Security MARS 25R, 25, 55, 110R, 110, 110R, 210, GC2R, GC2 appliances as well as all accessories and 110R FIPS cards. It also covers Cisco Security Software Releases 3.x, 4.x, 5.x, and 6.x.
A. Cisco will deliver signature updates for already supported devices for a period of three years after the end of sale. Customers will continue to receive Cisco IPS signature packages from cisco.com without having to install a new software release. For all other signatures, customers will have to upgrade their MARS appliances to the latest software release.
Q. What is the last Cisco MARS software release train supported on the Cisco MARS security appliances?
A. Cisco will continue to provide software bug fixes and/or feature updates until June 2, 2012. The last software train for new features will be delivered on the 6.1 release train. Signature updates will be provided until June 2, 2014. Therefore, software releases for signature updates may extend the releases into the 6.2 train.
Q. What is the last Cisco IPS and ASA software release supported by Cisco MARS security appliances?
A. ASA 8.4.1 and IPS 7.1 will be the last ASA and IPS devices officially supported by MARS. Cisco will continue to provide software bug fixes and/or feature updates until June 2, 2012.
Q. When is the last date of support for Cisco MARS appliances?
A. The Cisco TAC will continue to support Cisco MARS until June 2, 2013.
Q. How do I migrate my data to an ecosystem partner?
Q. What about customers who bought Cisco Security MARS appliances just prior to this announcement?
A. Cisco is fully committed to supporting the Cisco Security MARS appliances. These products will continue to be supported until June 30, 2016.
Q. Are there products Cisco recommends a customer migrate to? Which products should MARS customers migrate to?
A. Cisco recommends customers migrate to CSM and a SIEM ecosystem partner. Customers interested in a single tool for policy control, event management, tactical threat reporting may pursue CSM. Customers interested in advanced correlation, compliance reporting and long term event storage should consider a SIEM ecosystem partner. Cisco has researched and provided guidance on the use case tradeoffs between various ecosystem partners. Cisco has formed joint roadmaps and product integrations with our ecosystem partners. For security managed services, customers are encouraged to evaluate Cisco Remote Management Services.
Q. Does Cisco provide coordinated support for a Cisco SIEM ecosystem partner solution?
A. Customers can rest assured that Cisco has performed integration testing with our SIEM ecosystem partners. Should there be any technical issues with a Cisco product integrating with a partner, Cisco technical support will work with the partner and the customer to troubleshoot the issue. Core Cisco product issues will be resolved through Cisco technical support. If it is clearly a third party issue, Cisco TAC will direct the customer to the partner's technical support and Cisco will keep the case open until it is resolved to the satisfaction of the customer. For cases where both parties have a role to play, Cisco will work closely with the partner to resolve the issue for the customer.