Chapter 3. CS-MARS Deployment Scenarios

Before you can deploy a Cisco Security Monitoring, Analysis, and Response System (CS-MARS), you must first understand the various ways that you can deploy it. This means deciding how many MARS appliances you need, where to place them, and which devices you want to log to them. Many companies need only a single appliance. Others, though, need to deploy several appliances, using a centralized MARS appliance, called a global controller (GC), to manage the entire deployment.

This chapter describes the various options you have, including the following:

Deployment types—You can deploy a single CS-MARS appliance as a standalone controller if that fits your needs. Otherwise, you can deploy a global controller ...

Get Security Monitoring with Cisco Security MARS now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.