Security Monitoring with Cisco Security MARS Threat mitigation system deployment Gary Halleen Greg Kellogg Networks and hosts are investigated hundreds or thousands of times daily in an effort to discover vulnerabilities. Sheer volume of log messages or events generated by the attacks and probes, combined with the complexity of an analyst needs to use multiple monitoring tools, often makes it impossible to adequately investigate what happened. Cisco Security Monitoring, Analysis, and Response System (MARS) is a next-generation Security Threat Mitigation system (STM). The family is easy to use threat mitigation appliances enables you to centralize, detect, reduce, and report on priority threats by leveraging a network and security devices already placed on the network, even if the device from multiple vendors. Security Monitoring with Cisco Security MARS helps you plan a MARS deployment and administration and learn the installation tasks you can expect to face. Through the use of real-world deployment examples, this book guides you through all the steps necessary for the proper design and size, installation and troubleshooting, forensic analysis of security events, report creation and archiving, and integration of the appliance with Cisco and third-party vulnerability assessment tools. In many modern enterprise networks,? Security Information Management tools are very important in helping to manage, analyze, and relate an event data mountain. By relying on the wisdom of Kellogg and Halleen embedded in this book, you are far away will increase your MARS deployment.? ? Ed Skoudis, Vice President of Security Strategy, Predictive Systems Gary Halleen is a security consulting systems engineer with Cisco. Greg Kellogg is the vice president of security solutions for Calence, LLC. There he was responsible for developing channel partner programs and helped solution providers increase their security revenue. Learn the differences between various log aggregation and correlation systems Check the regulations and industry requirements Evaluate various deployment scenarios Right size your deployment Protect Cisco Security MARS appliance from attack Generate reports, archive data, and implement disaster recovery plans Investigate incidents when Cisco Security MARS detects an attack Troubleshoot Cisco Security MARS operation Integrate Cisco Security MARS with Cisco Security Manager, NAC, and third-party devices Manage groups of MARS controllers with global controller operations Security book is part of the Cisco Press Networking Technology Series. Security titles from Cisco Press help networking professionals secure critical data and resources, prevent and reduce network attacks, and build self-defending network end-to-end. Category:? Press Cisco Security Covers: Security Threat Mitigation