CMARS: Implementing Monitoring, Analysis and Response System

Prerequisites:

Fundamental knowledge of implementing network security / CCSP or Security CQS and working knowledge of routing and switching / CCNA

Course Description:

Cisco Systems offers the Mitigation and Response System (MARS) family of high performance, scalable appliances for threat management, monitoring and mitigation, enabling customers to make more effective use of network and security devices by combining network intelligence, context correlation, vector analysis, anomaly detection, hotspot identification and automated mitigation capabilities. CS MARS solutions empower customers to readily and accurately identify, manage and eliminate network attacks and maintain network compliance.

This course includes the following modules:

isco Security MARS Overview and STM Task Flow

• Introducing Cisco Security MARS
• Understanding STM Task Flow

Cisco Security MARS Configuration

• Configuring Reporting and Mitigation Devices
• Adding Cisco Security and Network Devices into the Cisco Security MARS Appliance
• Adding Security and Network Devices from Other Vendors into the Cisco Security MARS Appliance
• Working with User Defined Log Parser Templates

Cisco Security MARS Incident Investigation

• Network Summary
• Case Management
• Incident Investigation
• Sending Notifications

Cisco Security MARS Rules and Management

• Cisco Security MARS Rules
• Cisco Security MARS Management
• System Maintenance
• Cisco Security MARS Global Controller