Use Event Correlation for Network Security

Gain comprehensive visibility into network health, service performance, and subscriber behavior with CiscoWorks Security Information Management System (CiscoWorks SIMS) and the Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS. CiscoWorks SIMS is appropriate for use in mobile data networks and Cisco Security MARS is appropriate for use by mobile operators in IT deployments.

These solutions collect data from numerous devices distributed throughout the mobile data network infrastructure, including routers, switches, firewalls, intrusion prevention systems, web servers, and even server operating systems. This data is analyzed and multiple event correlation methods are used to identify both known and unknown threats.

Asset value assignment, threat visualization tools, response recommendations, and response workflow tracking ensure timely and effective incident response.