Procedure For Invoking Cisco Security Manager Policy Table Lookup From Cisco Security Mars - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Procedure for Invoking Cisco Security Manager Policy Table Lookup from Cisco Security MARS

Click Next to access the Reporting Applications tab.
Step 6
Select the Cisco Security Manager ANY from the Select Application list, and click Add.
Step 7
If you entered an address in the Access IP field on the host that represents this Security Manager server,
Step 8
specify values for the following fields:
•
•
•
•
(Optional) To verify that the settings are correct and that the MARS Appliance can communicate with
Step 9
this Security Manager server, click Test Connectivity.
Result: If the username and password are correct and the MARS Appliance is configured as an
administrative host for the device, the "Connectivity successful." dialog box appears when the discovery
operation completes. Otherwise, an error message appears, which you can click on the View Error link
for more information.
To add this device to the MARS database, click Submit.
Step 10
Result: The submit operation records the changes in the database tables. However, it does not load the
changes into working memory of the MARS Appliance. The activate operation loads submitted changes
into working memory.
Click Activate.
Step 11
Result: Once the MARS Appliance is activated, it can query the Security Manager server to perform
policy lookups.
Procedure for Invoking
Lookup from Cisco Security MARS
Do the following steps to view a Cisco Security Manager policy table from the Cisco Security MARS:
Log on to MARS as an Administrator or Security Analyst.
Step 1
Identify the incident or event to investigate.
Step 2
In this procedure, and incident to investigate appears on the Recent Incidents section of the Dashboard,
as shown in
User Guide for Cisco Security MARS Local Controller
16-14
User Name— Identifies the Cisco Security Manager administrative account to be used to discover
configuration settings.
Password — Identifies the password associated with the User Name account.
Access Type — This value identifies the protocol used to discover configuration information. Select
HTTPS.
Access Port — The default access port for HTTPS is port 443.
Cisco Security Manager
Figure 16-2.
Chapter 16 Policy Table Lookup on Cisco Security Manager
Policy Table
78-17020-01