CS-MARS 4.2.1 support for NM-CIDS

I'm currently trying to setup a CS-MARS 4.2.1 to monitor my network devices. I have seen in the configuration guide that it supports cisco swithces and ASA IPS modules, what about a router IPS module? (NM-CIDS)
I'am already added the IPS module to MARS as a standalone IPS 5.x device, tested connectivity and MARS is receiving events from the IPS.
The problem is that all those events are shown as "unkown device" on the reporting device column.
Could this behaviour be related with NM-CIDS not being supported by MARS? Any other idea?

It appears that the NM-CIDS is supported.
This was in the documentation on CCO:
http://www.cisco.com/en/US/partner/products/ps6241/products_configuration_example09186a008067a2b0.shtml#wp15514
If the link doesn't work do a search on
Configuring Distributed Threat Mitigation in Cisco Security MARS.
Hardware and Software Requirements
Static IPS Devices
Cisco IPS 4200 Series appliances using Cisco IPS Sensor Software v5.1.1 or greater
Cisco ASA 5500 Series appliances with the Advanced Inspection and Protection module using Cisco ASA Software v5.0 or greater
Cisco IDSM-2 sensor blades for the Cisco Catalyst 6500 Series using Cisco IPS Sensor Software v5.1.1 or greater
Cisco NM-CIDS Network Module (with Cisco IPS Sensor Software v5.1.1 or greater) for Cisco 2600XM, 2800, 3700, and 3800 series routers
Hope this helps.

Similar Messages

EEye REM support for MARS

Greetings,
According to the latest documentation for MARS eEye's REM 1.0 is supported for importing vulnerability information from hosts. Has anyone had any success using newer versions of REM with MARS or does the integration not work past version 1.0? I have talked to eEye about it but their answers are not conclusive regarding whether this actually works with the latest version of REM or not
Thanks

We spoke about the same with Wayne (from eeye). All we got was the REM user guide in return. It doesn't seem to mention anything!
Regards
Farrukh

[svn:bz-trunk] 20582: Add support for destination-include directory-path=" mydir"/ .

Revision: 20582
Revision: 20582
Author:   [email protected]
Date:     2011-03-03 12:35:14 -0800 (Thu, 03 Mar 2011)
Log Message:
Add support for <destination-include directory-path="mydir"/>.
This will process each file ending in ".xml" as an individual <destination-include file-path=""/> element, allowing a web application to define a directory of destination configuration snippets.
Added a new API to ConfigurationFileResolver.java: getFiles(String dir).
This returns a list of XML files contained in this directory relative to the current configuration file.
Updated both the ServletResourceResolver and the LocalFileResolver with implementations.
Modified Paths:
    blazeds/trunk/modules/common/src/flex/messaging/config/ConfigurationConstants.java
    blazeds/trunk/modules/common/src/flex/messaging/config/ConfigurationFileResolver.java
    blazeds/trunk/modules/common/src/flex/messaging/config/LocalFileResolver.java
    blazeds/trunk/modules/core/src/flex/messaging/config/ServerConfigurationParser.java
    blazeds/trunk/modules/core/src/flex/messaging/config/ServletResourceResolver.java

Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them. This may or may not be unique to Arch Arm, so you might try asking on their forums as well.

Is Their Any Support For Data Aware Routing Through The Coherence DataGrid?

Hi all,
Following paragraph describes the feature i m looking for(*Data Aware Nodes*)......
The Function Service can transparently route behavior to one or more nodes in the cluster. In the case of Data Aware Functions, the behavior can be directly routed to the node(s) that hosts the data needed to execute the function in parallel, stream and aggregate the results substantially reducing the time taken to execute complex data intensive tasks.
So please tell me is their any support for above said question. If this feature is their in coherence please help me with it's configuration and implementation as well.
Thanx

Hi JK thank you for your reply
I want to achieve Data Aware Routing in Parallel Execution (Parallel Function Execution).
Consider a case where i have three nodes (say Node A,B C) in coherence cluster with partitioned scheme. Now suppose we have Employee related objects stored in cache of Node A and Node C only, but not on Node B. Then i want to perform some operation on Employee objects only in parallel fashion.
In coherence i ll achieve this using map.invokeAll(collectionKeys, agent);_ from client program.
Now my question to you is, as my operations are based on Employee objects only which are stored on Node A & c. Then When i request parallel Execution from client program which will connect to Node A from our cluster, will it go to Node B where their is no Employee objects ??????
Edited by: 981644 on Mar 6, 2013 7:52 PM

[svn:fx-4.x] 14985: Add support for mirroring for both error tips and tool tips in positionTip ().

Revision: 14985
Revision: 14985
Author:   [email protected]
Date:     2010-03-24 09:40:24 -0700 (Wed, 24 Mar 2010)
Log Message:
Add support for mirroring for both error tips and tool tips in positionTip(). The layoutDirection of the toolTip will be the same as the component it goes with, or LTR, if the component is not ILayoutDirectionElement.
QE notes:
Doc notes: None
Bugs: SDK-25821
Reviewed By: Jason
Tests run: checkintests
Is noteworthy for integration: No
Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-25821
Modified Paths:
    flex/sdk/branches/4.x/frameworks/projects/framework/src/mx/managers/ToolTipManagerImpl.as
    flex/sdk/branches/4.x/tools/dependencychecker/frameworkSwcExceptionsList.txt

Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them. This may or may not be unique to Arch Arm, so you might try asking on their forums as well.

Support for Office 2007 files (especially docx) ?

Hi,
can you please give me a hint if it's possible to use ora-text with the current office 2007 file formats ?
I need to have support for word 2007 (docx) format very soon
Is it already available ?
If not, is there a plan to support those formats ?
Thank you

Hi,
the workaround descrived above would also work for your plsql app. Therefore you can use the PL/SQL XSLT Processor in order to extract the content needed from the office 2007 documents. See DBMS_XSLPROCESSOR.
What is your business case? How do you store and index your documents?
p.s Here is an example of an xslt to extract the text content from an docx document. The internal structure of docx document is based on the Open Packaging Conventions (see http://openxmldeveloper.org/articles/OPC_parts.aspx )
<?xml version="1.0" encoding="utf-8"?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns:w="http://schemas.openxmlformats.org/wordprocessingml/2006/main"
xmlns:v="urn:schemas-microsoft-com:vml"
exclude-result-prefixes="w v">
<xsl:output method="text" indent="no" encoding="UTF-8" version="1.0"/>

<xsl:template match="/">

<xsl:apply-templates select="w:document"/>

<xsl:apply-templates select="w:hdr"/>

<xsl:apply-templates select="w:ftr"/>

<xsl:apply-templates select="w:comments"/>

<xsl:apply-templates select="w:footnotes"/>

<xsl:apply-templates select="w:endnotes"/>

<xsl:apply-templates select="w:glossaryDocument"/>
</xsl:template>

<xsl:template match="w:document">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text>
</xsl:text>
</xsl:for-each>

<xsl:apply-templates select="//v:textpath"/>
</xsl:template>

<xsl:template match="*/w:t">
<xsl:value-of select="."/>
</xsl:template>

<xsl:template match="//v:textpath">
<xsl:value-of select="@string"/>
</xsl:template>


<xsl:template match="w:hdr">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text>
</xsl:text>
</xsl:for-each>
</xsl:template>


<xsl:template match="w:ftr">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text>
</xsl:text>
</xsl:for-each>
</xsl:template>


<xsl:template match="w:comments">
<xsl:for-each select="//w:t">
<xsl:value-of select="."/>
<xsl:text> </xsl:text>
</xsl:for-each>
</xsl:template>


<xsl:template match="w:footnotes">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text> </xsl:text>
</xsl:for-each>
</xsl:template>


<xsl:template match="w:endnotes">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text> </xsl:text>
</xsl:for-each>
</xsl:template>


<xsl:template match="w:glossaryDocument">
<xsl:for-each select="//w:p">
<xsl:apply-templates select="*/w:t"/>
<xsl:text>
</xsl:text>
</xsl:for-each>

<xsl:apply-templates select="//v:textpath"/>
</xsl:template>

</xsl:stylesheet>
Edited by: user304344 on Mar 30, 2009 10:23 PM

Support for Siebel

Hi All,
I came to know from my friend that Support for Siebel will be stopped by 2013. Is it true?
Regards,
Mani

Your "friends" are wrong...
Official Lifetime support is detailled here (p.15 for SIEBEL products)
http://www.oracle.com/support/library/brochure/lifetime-support-applications.pdf
Globally, Oracle support has 4 phases:
-Product is made Globally Available (GA)
-GA+ 5 years later, end of normal support (if you are paying your maintenance fees)
-GA+ 8 years later, end of extended support (means a bit more expensive)
-GA+ N years later, end of life (means no customer can afford the high maintenance fees required for obsolete products)
==> That is why you have to handle a migration policy.
If there is no specific technical gap (like v6 to v7 was or v8 to vFusion may be):
-stay on your current release with at least 1 patch per year
-plan migration before GA+5 or GA+8 years depending on your business needs on SIEBEL
Best regards
Bruno @BearingPoint (Paris France)
Edited by: user6683637 on Mar 12, 2009 2:07 PM

Support for Nexus syslogs

I am about to turn up some new Nexus switches, and am curious if anyone else has tried using MARS to discover and collect syslogs from NX-OS. If you've tried it, what was your experience? Are the Nexus syslogs close enough to IOS syslogs to at least let MARS understand most?
If it's a no-go, is there planned support for NX-OS in an upcoming MARS release?
Thanks.

I note Nexus syslogs are still not supported in CS-MARS v6.1.x Revised: January 27, 2011
With CS-MARS product now end of sale June 2011, should I hold out any hope of a fix before end of Software Maint in June 2012 ?

No support for text-anchor

According to the documentation, Mars Project doesn't support
some SVG's commands, like "text-anchor". So, how can we align text
labels to the center when we need to?, you guys won't denay this is
essential, right?

I agree that your font method is legal. What I'm driving at
is that your technically legal use of the SVG font structures seems
to destroy the normally used font selection mechanisms in SVG.
From my point of view:
#1-SVG embedded fonts are impractical for some situations due
to file size.
#2-It seems likely that we will need to embed a standard font
file anyway for many situations, and it isn't practical to embed an
open-type font and an SVG font.
#3-PDF open type font embedding is meaningless if the SVG is
taken out of the Mars file.
#4-If PDF open type font embedding is used, it breaks the
normal font-selection mechanism of SVG since the "font-family"
attribute is now overloaded for an alternate use.
Therefore:
#1-We must have open-type font embedding for Mars.
#2-We must have standard SVG font selection available for
non-Mars SVG.
#3-We cannot have both at the same time.
The original problem is with the SVG spec. Font-family should
never have been overloaded to either point to a local
font-definition, or to be used as a system font selector. In normal
SVG, this isn't much of a problem since using <svg:font-face-uri
xlink:href="/fonts/font"/> to point to an SVG font seems to be
pretty rare -- It's the standard M.O. for PDF though.
The only way your font mechanism "breaks standard practice"
is that the referenced font definition is local to the Mars package
and isn't meaningful if the SVG file is stand-alone. The
<svg:font-face-uri /> tag seems to trump every other font
selection mechanism. In the Adobe SVG viewer that I've been
experimenting with, if you reference a non-existent font file, no
font gets selected at all; no text gets printed at all. There's no
way to fall back from such a failed, specific font selection.
It may be that we can just choke down the extra file size and
use only SVG font embedding. The documentation seems to be of two
minds as to whether SVG fonts will be supported, however. Besides
which, while zipped SVG fonts seem to be twice as big as their
open-type counterparts, we must embed the SVG font on each page.
So, SVG fonts don't really mean 2X(open-type font size); they mean
2XPAGE_COUNT(open-type font size)...
I consider [<text x="100" y="100" font-family="Poor
Richard" font-size="18">Line in Poor Richard</text>] to be
a "normal" method of font selection.

IPod Reset Utility is not supported for use with Windows Vista??????

is there anyway to get pass this?
i need to use the ipod resetutility to reset my shuffle
but the only problem is that i have Vista and the program isnt
supported for vista. can someone help me out here?

well the only problem with that is that
everyone i know use vista -.-

Lack of support for Canon G7 and G9. Alternatives?

I am really disappointed about the lack of support for the Canon G9, and looking at the list of compatible cameras (http://docs.info.apple.com/article.html?artnum=306835) I notice that Canon G7 - even if it does not have a RAW format, is not supported either.
I am thinking that the purchase of the G9 may have been premature and that I may need to sell it and get another cam that is supported by Apple/Aperture.
What would you guys do? Is there a cam out there similar to the G9 at the moment that has a Apple-supported RAW format?
Best regards,
Kjell Are Refsvik

I think the camera closest to the G9 that has RAW support from Apple are the Panasonic DMC-LX2/Leica D-Lux 3 twins. Don't know where you are, but in the US, the Panasonic costs about $400. 10MP, 28-112mm (35mm equivalent) Leica lens, very compact body, and RAW output. The Leica costs $599, and has that classic look.
I don't know much about that cameras, but you may want to investigate.
Message was edited by: rkkwan
Message was edited by: rkkwan

Why no SyncML-support for Harmattan??

I've used SyncML on my N95 with memotoo.com for years. Worked very well. I took it for granted that SyncML would be supported on the N9. But alas, it isn't. I find that really incomprehensible. Worse yet, CalDAV syncing with memotoo doesn't work - I don't know who's to blame for this, but on the desktop it works flawelessly so I do have a suspicion. Even worse: there is no way to sync contacts using CardDAV.
MeeGo (the true MeeGo) has SyncML-support out-of-the-box. And the N9/N950 does have SyncML-support for bluetooth.
Yes, contacts syncing is supported for Ovi. And Google. And Facebook. But I do NOT want to use those services, because of grave privacy risks and because they use yet again some proprietary protocols.
I wonder, what where they thinking at Nokia for NOT supporting some well-known open standards??
(While I'm ranting: why is there ^%@$ Facebook and GTalk-support over XMPP, but no self-defined XMPP account?? Yes, you can add such accounts from the terminal, using mc-tool, but really that's just a kick in the teeth. And where's UPnP/DLNA-support?)

Hey Guys, Did you figure out any way to do PIM sync via SyncML on N9?
I am struggling to get things moving as I come from N8.
N9 just doesnt have any way to sync calendar, tasks with Ovi. Same with Notes.
Best Regards,
Suyog

ISE 1.2.1 support for Yosemite?

Hello all, just curious. I see in the release notes for ISE 1.2.X that support for Mac OS 10.10 (Yosemite) was available via patch 12 on the ISE1.2.0 train of code. That said, I see nothing in the release notes stating any support for Yosemite for any of the patches for ISE1.2.1, the latest being patch 3 released 1 week after ISE 1.2.0 patch 12. Can anyone please advise if Yosemite is in fact supported on 1.2.1 with patch 3??
Thank you very much in advance for your help
Jeff

Jeff,
OS X 10.10 is supported in ISE 1.2 p11, 1.2.1 p2 and 1.3.
Patch 12 for 1.2 and Patch 3 for 1.2.1 fix other issues for OS X 10.10, and I recommend updating to the latest patches for these fixes.
Here is the entry in the Release Notes detailing the fix for 10.10 in 1.2 p 12:
MacOsXAgent versrion 4.9.5.3 should be used and MacOsXSPWizard 1.0.0.30
Note that the description for these files denote ISE 1.2 Patch 11/12, ISE 1.3 release and above. ISE 1.2.1 is not mentioned, but follows the bug fix/release schedule for 1.2, with an adjustment.
1.2 patch 10 = 1.2.1 patch 1
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton

HT204266 My iPad (version 1, IOS 5.1) has quit connecting with the store. I am unable to update or buy any app. I did a reboot and a reset with deleting the data. I can not find anything in support for this problem. Any help will be appreciated.

My iPad (version 1, IOS 5.1) has quit connecting with the store. I am unable to update or buy any app. I did a reboot and a reset with deleting the data. I can not find anything in support for this problem. Any help will be appreciated.

My iPad (version 1, IOS 5.1) has quit connecting with the store. I am unable to update or buy any app. I did a reboot and a reset with deleting the data. I can not find anything in support for this problem. Any help will be appreciated.

Apple Support for FCE HD - $200 per call???

i had what was probably a minor issue with editing in final cut express hd today. So naturally, i called applecare. They told me that it had been past the 90 days given to us for support from the point of purchase. Fine. However, the apple support representative went on to tell me that Applecare does NOT support pro applications and that i have to pay $199 per incident? I paid $299 for the product itself! Last i checked, i-pods were selling pretty well and i don't think steve jobs needs that money! Is apple serious? Where do they get off charging $200 for a ONE TIME PHONE CALL? Just because FCE HD is a "pro" application, apple can't assume that everyone who purchases this product is a "pro" from the start!
Where else am i supposed to get phone technical support for FCE HD??

These forums are here to give you technical advice. Admittedly it is not over the phone but it is FREE and lasts for ever.
Also you will have the collective knowledge of numerous people not just the one "expert" you happen to be speaking to.
Ian.

CS-MARS 4.2.1 support for NM-CIDS

Similar Messages

Maybe you are looking for