Delete All Displayed Reporting Devices; Add Multiple Reporting And Mitigation Devices Using A Seed File - Cisco CS-MARS-20-K9 - Security MARS 20 User Manual

Adding Reporting and Mitigation Devices
Click Delete.
Step 3
On the confirmation page, click Submit.
Step 4
The device is deleted from the selected page.

Delete All Displayed Reporting Devices

You can perform this procedure from the Admin > Security and Monitoring Devices page.
To delete all devices displayed on a page, follow these steps:
On the Admin > Security and Monitoring Devices, select the checkbox to the left of the Device Name
Step 1
column heading at the top left of the table.
All displayed devices are selected.
Click Delete.
Step 2
A page appears prompting you to confirm that you want to delete the list of devices.
Step 3 Click Submit to delete all the selected devices.

Add Multiple Reporting and Mitigation Devices Using a Seed File

The seed file is a comma-delimited file with the file extension .csv (comma-separated value). Most
spreadsheet programs let you import and export files as CSV files.
The following is a sample seed file as exported from a popular spreadsheet program:
10.1.1.1,,,,PIX,TELNET,,,cisco,,,,,,,,,,,
192.168.229.241,,,,IOS,TELNET,,,csRv$12*,EcsRv$12$,,,,,,,,,,
10.1.1.83,,,,PIX,SSH,pix,Vpnspn12,,vPfw1ne,,,,,,,,,,
192.168.151.169,,,,PIX,SSH,pix,lpt$12,,pot$1*d1,,,,,,,,,,
10.4.2.4,,,,NETSCREEN,SSH,netscreen,nt*$scn25,,,,,,,,,,,,
10.4.2.3,,,,NETSCREEN,SSH,netscreen,nt*$scn10,,,,,,,,,,,,
10.1.1.241,,,,IOS,TELNET,,,cisco,cisco,,,,,,,,,,
10.4.2.1,,,,IOS,TELNET,,,Qa$1*5ft,gt$*j15,,,,,,,,,,
10.4.2.2,,,,IOS,TELNET,,,Qa$1*5ft,gt$*j15,,,,,,,,,,
wanRouter,public,,,IOS,SNMP,,,,,,,,,,,,,,,
myPix63,,,,PIX,SSH,pix,test1,,test1234,,,,,,,,,,,10.2.3.1
MyPc,,,,WINDOWS,RPC,myname,mypass,,,,,,,,,,,,,
myPix70,,,,PIX7X,SSH,,,,,,,,,,,,,,,
myids40,,,,CiscoIDS4x,SSL,,,,,,,,,,,,,,,
myids50,,,,CiscoIPS5x,SSL,,,,,,,,,,,,,,,
myASA70,,,,ASA,SSH,,,,,,,,,,,,,,,
myWindowsNT,,,,WindowsNT,RPC,,,,,,,,,,,,,,,
myFWSM23,,,,FWSM,SSH,,,,,,,,,,,,,,,
With the CSV file, you can enter the values, passwords, and information for each device that you want
the MARS Appliance to monitor in its appropriate row and column. While the seed file is useful for
getting the MARS Appliance started processing event data for most devices, you may need to use the
Admin > System Setup > Security and Monitoring Devices page to fine-tune the device manually. In
addition, you must Activate the devices that you add using a seed file (see
Mitigation Devices, page
User Guide for Cisco Security MARS Local Controller
2-20
2-27).
Chapter 2 Reporting and Mitigation Devices Overview
Activate the Reporting and
78-17020-01