- Security and network information overload
- Poor attack and fault identification, prioritization, and response
- Increases in attack sophistication, velocity, and remediation costs
- Compliance and audit requirement adherence
- Security staff and budget constraints
- Integrating network intelligence to modernize correlation of network anomalies and security events
- Visualizing validated incidents and automating investigation
- Mitigating attacks by taking full advantage of your existing network and security infrastructure
- Monitoring systems, network, and security operations to aid in compliance
The Cisco Security Monitoring, Analysis and Response System (Cisco Security MARS) is an appliance-based, all-inclusive solution that allows network and security administrators to monitor, identify, isolate, and counter security threats. This family of high-performance appliances enables organizations to make more effective use of their network and security resources.
Cisco Security MARS can monitor security events and information from a wide variety of sources, including third-party devices and hosts. With its correlation engine, vector analysis, and hotspot identification, Cisco Security MARS can not only identify anomalous behavior and security threats, but can also recommend precision removal of those elements, leading to rapid threat mitigation. In addition, Cisco Security MARS incorporates a comprehensive reporting engine that provides easy access to information for compliance reporting.