Cisco CS-MARS-20-K9 - Security MARS 20 User Manual page 9

Configuring Host-Based IDS and IPS Devices
7
C H A P T E R
Configuring Antivirus Devices
8
C H A P T E R
78-17020-01
Entercept Entercept 2.5 and 4.0
Extracting Entercept Agent Information into a CSV file (for Entercept Version 2.5)
Create a CSV file for Entercept Agents in Version 2.5
Define the MARS Appliance as an SNMP Trap Target
Specific the Events to Generate SNMP Traps for MARS
Add and Configure an Entercept Console and its Agents in MARS
Add the Entercept Console Host to MARS
Add Entercept Agents Manually
Add Entercept Agents Using a Seed File
Cisco Security Agent 4.x Device
Configure CSA Management Center to Generate Required Data
Configure CSA MC to Forward SNMP Notifications to MARS
Export CSA Agent Information to File
Add and Configure a CSA MC Device in MARS
Add a CSA Agent Manually
Add CSA Agents From File
Troubleshooting CSA Agent Installs
Symantec AntiVirus Configuration
Configure the AV Server to Publish Events to MARS Appliance
Export the AntiVirus Agent List
Add the Device to MARS
Add Agent Manually
Add Agents from a CSV File
McAfee ePolicy Orchestrator Devices
Configure ePolicy Orchestrator to Generate Required Data
Add and Configure ePolicy Orchestrator Server in MARS
Cisco Incident Control Server
Configure Cisco ICS to Send Syslogs to MARS
Add the Cisco ICS Device to MARS
Define Rules and Reports for Cisco ICS Events
7-1
7-1
7-3
7-4
7-4
7-5
7-6
7-7
7-8
7-9
7-10
8-1
8-1
8-7
8-7
8-7
8-8
8-8
8-13
8-14
8-15
8-15
User Guide for Cisco Security MARS Local Controller
7-1
7-2
7-2
7-2
7-3
7-5
7-6
8-1
8-8
8-12
Contents
ix