User Guide for Cisco Security MARS Local and Global Controllers, Release 6.x
Preface
Part 1: System Overview and Taskflow
Introduction to MARS
Security Threat Mitigation (STM) Task Flow Overview
Reports and Mitigation Devices Overview
Part 2: Using the System
Rules
Alerts and Incident Notifications
Management Tab Overview
Network Summary
Queries and Reports
Incident Investigation and Mitigation
Case Management
Security Manager Policy Table Lookup from a MARS Event
Botnet Traffic Filtering
Part 3: Administering the System
System Maintenance
Authenticating MARS Accounts with External AAA Server
Part 4: Defining Custom Devices and Packages
Monitoring Events from Custom and Unsupported Devices or Versions
Part 5: Appendices
Date/Time Format Specification
Regular Expression Reference
DSF Event Type Group Reference
Cisco Security MARS XML API Reference
System Rules and Reports
Index
User Guide for Cisco Security MARS Local and Global Controllers, Release 6.x
Click the links on the left to view the individual chapters in HTML format.
Download the complete book
(
PDF -
15 MB
)