Table of Contents
Advertisement
Adding Reporting and Mitigation Devices
Remember that you do not have to add all of the devices configuration information at once. You can start
Note
by adding the device's name and its access IP address. You can always return later, when the MARS
starts to report to you, and provide more details.
To add a device manually, follow these steps
Click Admin > System Setup > Security and Monitor Devices > Add.
Step 1
Step 2
Select the device from the list.
Step 3
Enter the information needed to communicate with the device.
Click Submit.
Step 4
Once add a device, you must click Activate for MARS to correctly process events received from that
Step 5
device. For more information, see
Edit a Device
Check the box next to the device.
Step 1
Edit the device's settings.
Step 2
Step 3
Click Submit.
Upgrade the Device Type to a Newer Version
You can change the Device Type version setting of a hardware-based security device. You cannot
upgrade the version for software applications running on a host. To upgrade the software appliance
version, you must remove the application from the host and add the newer one.
This version change feature applies only to device types with the same vendor and model but different
versions. Specifically, you can change the version for the following device types:
•
•
•
•
For example, you could change the settings for the device type Cisco PIX 6.1 to Cisco PIX 7.0 without
having to delete the device and add it again. The benefit of matching the version setting to the deployed
device is that it allows MARS to correlate any event types introduced in the more recent version. It also
allows you to incrementally upgrade your reporting devices without having to worry about when to add
that reporting device to MARS. The events that are correlated under one device type will be associated
with the newer device type version when you make the change in MARS.
To change the version of a device, follow these steps:
User Guide for Cisco Security MARS Local Controller
2-18
Cisco IDS
Cisco PIX
Cisco VPN Concentrator
NetScreen ScreenOS
Chapter 2
Activate the Reporting and Mitigation Devices, page
Reporting and Mitigation Devices Overview
2-27.
78-17020-01
- Quick Links:
- Table of Contents
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
