-
Using Management Center for Cisco Security Agents 5.1
-
Title
-
Preface
-
Overview
-
Management Center for Cisco Security Agents Administration
-
Configuring Groups and Managing Hosts
-
Building Policies
-
Rule Module Configuration
-
Available Rule Types
-
Using Event Correlation
-
Using Application Classes
-
Configuring Variables
-
Event Logging and Alerts
-
Generating Reports
-
Using Mangement Center for Cisco Security Agents Utilities
-
Using Cisco Security Agent Analysis
-
Third Party Product Integration
-
Cisco Security Agent Overview
-
System Components
-
Open Source License Acknowledgements and Third Party Copyright Notices
-
Table Of Contents
Third Party Product Integration
Cisco MARS Integration Support
netForensics Integration Support
Third Party Product Integration
Overview
The Management Center for Cisco Security Agents provides integration with other third party products. This section provides information on supported third party integration applications.
In most cases, you are referred to the third party documentation for configuration information.
This section contains the following topics.
•
Cisco MARS Integration Support
•
Cisco VPN Client Support
The Cisco Security Agent is a supported configuration for the "Are You
There?" feature of the Cisco VPN Client, Release 4.0. For configuration
details, please refer to Chapter 1 of the Cisco VPN Client Administrator
Guide, in the section entitled "Configuring VPN Client Firewall Policy --
Windows Only."Cisco MARS Integration Support
MARS is a Security Information Management (SIM) appliance. It delivers a range of information about your networks' health as seen through the "eyes" and "ears" of the reporting devices, sessionizes them across different devices, fires default rules for incidents, determines false positives, and delivers consolidated information through diagrams, charts, queries, reports and rules.
To integrate events generated by the Cisco Security Agent with the MARS appliance, refer to Chapter 3 of your MARS User Guide documentation.
netForensics Integration Support
netForensics is a Security Information Management application that can receive security events from multiple devices. This gives the administrator the convenience of having a single point from which to manage events from heterogeneous sources. netForensics presents the information in a real-time, web-based console so that these events can be managed across the network.
To integrate events generated by the Cisco Security Agent with the netForensics application, refer to your netForensics documentation.