Implementing Cisco Security Monitoring, Analysis and Response System

Course description

The Cisco Security Mitigation and Response System (CS MARS) is a family of high performance, scalable appliances for threat management, monitoring and mitigation, enabling customers to make more effective use of network and security devices by combining network intelligence, context correlation, vector analysis, anomaly detection, hotspot identification and automated mitigation capabilities.

This 4-day course will show you how to use CS MARS to readily and accurately identify, manage and eliminate network attacks and maintain network compliance.

Learning objectives

After you complete this course, you will be able to:

• Describe a CS-MARS solution and its role in Cisco Threat-Defense System management
• Describe the software components of CS-MARS architectural design
• Configure the network reporting devices to work with the CS-MARS appliance
• Use network reporting and mitigation devices with the CS-MARS appliance
• View the security status of your network
• Configure a rule that detects patterns of network activity and anomalous network behavior
• Generate queries and reports
• Perform incident investigation
• Configure user-defined log parser templates
• Integrate Cisco Security Manager and CS-MARS
• Perform common maintenance and troubleshooting tasks
• Describe the functions of the CS-MARS Global Controller

Who should attend

This course is designed for network professionals who will be implementing or administering the CS MARS system.

Recommended prerequisites

• CCNA certification or equivalent knowledge
• Fundamental knowledge of implementing network security
• CCSP or Security CQS recommended

Related training

• Securing Cisco Network Devices (SND)
• Securing Networks with Cisco Routers and Switches (SNRS)