|
Free ebooks
 More computer ebooks Cisco Security Monitoring with Cisco Security MARS
|
 Chapter 1: Introducing CS-MARS—This chapter discusses differences between different log aggregation and correlation systems. It also covers an introduction to the various MARS components, the user interface, and the types of devices that typically log to MARS.Chapter 2: Regulatory Challenges in Depth—This chapter examines many of the regulatory and industry requirements businesses face today, and how MARS assists in meeting these requirements. Chapter 3: CS-MARS Deployment Scenarios—This chapter examines the various ways local controllers, standalone controllers, and global controllers can be deployed to best meet your needs. Additionally, it covers techniques for properly sizing your deployment. Chapter 4: Securing CS-MARS—This chapter focuses on why you need to secure CS-MARS and other security management or monitoring products, and how to protect MARS from attack. Chapter 5: Rules, Reports, and Queries—This chapter covers how to understand and use the reporting and query interfaces. Chapter 6: Incident Investigation and Forensics—This chapter focuses on what to do when CS-MARS detects an attack. Chapter 7: Archiving and Disaster Recovery—This chapter focuses on data retention, archiving, and recovering from a disaster. Chapter 8: Integration with Cisco Security Manager—Cisco Security Manager is a management product for Cisco security products. This chapter demonstrates integration between the two products and describes how to use the strengths of each. Chapter 9: Troubleshooting CS-MARS—This chapter discusses what to do when things don’t work like they should. What do you do before calling TAC? Chapter 10: Network Admission Control—This chapter discusses the Cisco Network Admission Control set of products that allow or deny network access based on a host’s capability to meet a certain posture level, and describes how NAC integrates into CS-MARS. Chapter 11: CS-MARS Custom Parser—This chapter dives into configuring CS-MARS to use security logs from officially unsupported devices and software. Chapter 12: Global Controller Operations—This chapter focuses on what is involved in using a global controller to manage and monitor a group of MARS local controllers. Download free pdf ebooks for cisco:Security Monitoring with Cisco Security MARS
|
