Cisco Security MARS Initial Configuration and Upgrade Guide, 6.X
Preface

Table Of Contents

Preface

Audience

Organization

Related Documentation

Obtaining Documentation, Obtaining Support, and Security Guidelines


Preface


Revised: September 11, 2008, OL-16776-01

This manual describes how to initialize and prepare the Cisco Security Monitoring, Analysis, and Response System Appliance (MARS Appliance) Version 6.0.x for more detailed configuration. It describes how to upgrade an existing appliance, and how to back up existing configurations and event data. This manual also details administrative tasks that you can perform from the command line interface (CLI), including disaster recovery procedures using the Recovery DVD.

Audience

This manual is for system administrators who install and configure internetworking equipment and who are familiar with Cisco IOS software. Specifically, this manual is for system administrators who will install and configure a new MARS Appliance. It is also for administrators who have existing MARS Appliances that they want to upgrade to the most recent version available under their support contract.


Warning Only trained and qualified personnel should install, replace, or service this equipment.


Organization

This manual consists of the following chapters and appendixes:

Chapter 1, "Deployment Planning Guidelines," provides guidance for device placement and calculating event/second monitoring rates to determine appropriate device monitoring limits.

Chapter 2, "Initial MARS Appliance Configuration," provides instructions on the initial configuration of the MARS Appliance.

Chapter 3, "Configuring the Global Controller," instructions on adding Local Controllers to be monitored by a Global Controller.

Chapter 4, "Performing Command Line Administration Tasks," describes how to perform common tasks, including shutdown, restart, and monitor logs and services from the console. It also explain how to configure a Secure Shell (SSH) client to make the console connections.

Chapter 5, "Upgrade Management," describes how to upgrade the appliance to the latest binary and/or data package.

Chapter 6, "Backup, Recover, Restore, and Standby Server Options," describes how to prepare archive servers, back up data, or restore using the Recovery DVD or an archive server. It also describes how to configure a Standby server.

Appendix A, "Troubleshooting," identifies backend services and describes their roles in the system. It also identifies common error messages and helps you troubleshoot known issues.

Related Documentation


Note We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates.


For a complete listing of the documentation related to this version, please see the release-specific version of the Cisco Security MARS Documentation Guide, License, and Warranty at:

http://www.cisco.com/en/US/products/ps6241/products_documentation_roadmaps_list.html

You can find other product literature, including white papers, data sheets, and product bulletins, at:

http://www.cisco.com/en/US/products/ps6241/index.html.

Obtaining Documentation, Obtaining Support, and Security Guidelines

For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html