Security Monitoring With Cisco Security Mars

Master the CS-MARS system from Cisco with the only book available on this comprehensive security system Master the benefits of using the CS-MARS system from Cisco from real-world case studies Learn to sort out false positive alarms and validate true security incidents that need immediate action Mitigate attacks by automating investigation of incidents Manage and maintain information security compliance in line with the most recent governmental regulations Security Monitoring with CS-MARS will help you plan a MARS (Security Monitoring, Analysis, and Response System) deployment and learn the installation tasks and day-to-day tasks a network security professional can expect to face. Additionally, the book will teach you how to use the advanced features of the product, such as the custom parser and hierarchical deployment models. Security Monitoring with CS-MARS uses a series of real-world case studies to lead you through all steps of these very important tasks, including: Proper deployment design and sizing Basic installation and troubleshooting of the appliances Forensic analysis of security incidents Integration of MARS with Cisco Security Manager software Integration of MARS with Cisco Distributed Threat Mitigation Integration of third-party vulnerability assessment tools While security products have gained capabilities and sophistication, security monitoring has not kept pace. Usually, a company finds they need to deploy a different monitoring tool for each specific product. This results in increased staffing costs, but doesn't address the overall need to make sense from the data accumulated from various logging sources. CS-MARS addresses this need, and this book helps those network professionals using it get the most from the system.Halleen, Gary is the author of 'Security Monitoring With Cisco Security Mars ', published 2007 under ISBN 9781587052705 and ISBN 1587052709.