MARS and REM 3.0 Support

I know I can configure MARS to pull data from the REM Security Management Console version 1.0, but is there also support for later versions of REM? Does this matter and has anybody seen compatibility issues with the later versions?
Thanks!

I can confirm that there are infact issues with REM 3.0. I tried to configure it and the reporting device and Source and Destination IP addresses as well as reporting device fields do not come into the system correctly.
I contacted Eeye and was told.
"There was a recent change to the EVT table ( the one MARS reads from ) to improve performance of the DB."
That is what is causing the problem.

Similar Messages

  • Mars and accessibility

    I'm working in the field of accessibility for the past years,
    I recently tried the new MARS plugin on Adobe 8 Professional and I
    become very curious about future prospects in Adobe for Mars
    format.
    Will accessibility in PDF be redirected to MARS? Will Adobe
    Reader include the option to read .mars files by default?
    I think that nobody talks about mars and it could be a
    really interesting issue in this field.
    I asked Duff Johnsonn on the subject and he redirected me to
    Adobe, as he thinks Mars and accessibility would be a promising
    issue.
    Thanks in advance for your attention,
    Mireia Ribera
    Universitat de Barcelona. Departament Biblioteconomia i
    Documentació
    http://bd.ub.es/pub/ribera

    Hello Alexander
    Since MARS is going away in a while, you won't find that many device updates,even the latest release does not support NAC 4.8.x (officially).
    http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.1/compatibility/local_controller/dtlc6x.html
    However you can always add a NAC  4.8.x box as whatever is supported in the GUI and MARS would work in backwards compatible mode ignoring the  log messages introducted in the newer releases.
    Regards
    Farrukh

  • MARS and CiscoWorks

    Is there any way to integrate MARS and CiscoWorks? I would like to have the CiscoWorks Common Syslog Collector to forward all syslog messages to MARS. Is this possible? Thanks for any help in advance.

    I don't believe that Ciscoworks does syslog forwarding, but the latest version of MARS supports being 'fed' syslog messages via a true syslog forwarder (e.g. Kiwi Syslog). I think Kiwi is free or otherwise inexpensive (compared to MARS!). Have the devices forward to the Kiwi server, and then forward to LMS and MARS respectively.
    There's not much integration between Ciscoworks LMS and MARS since it was developed as an independent product and then acquired by Cisco a little over a year ago. Based on conversations I've had with the MARS TME and my Cisco reps I think they've heard the message that we want better integration, but they're probably going to focus on security features first, and integration second (and rightly so.) Still, it certainly would be nice to tie into the DCR instead of the kludgy way you add devices to MARS now.

  • Mars and NAC 4.8

    Hello, i am deploying CS-MARS and i have i problem, i cant add Cisco Network Access Control in the MARS to the controleld devices
    There is just 4.1 versions.
    Is it support 4.8?
    Thanks in advance
    A.Black

    Hello Alexander
    Since MARS is going away in a while, you won't find that many device updates,even the latest release does not support NAC 4.8.x (officially).
    http://www.cisco.com/en/US/docs/security/security_management/cs-mars/6.1/compatibility/local_controller/dtlc6x.html
    However you can always add a NAC  4.8.x box as whatever is supported in the GUI and MARS would work in backwards compatible mode ignoring the  log messages introducted in the newer releases.
    Regards
    Farrukh

  • CS MARS and CSA

    If we have both CS MARS and CSA to monitor network devices, and we have all servers send logs to CSA only and then CSA send logs to CS MARS, is that going to affect the result of vulnerability scanning done by CS MARS on servers as in order for CS MARS to recognise that the incident is system determind false positive. therefore, will adding servers in CSA only not allow CS MARS to directly perform vulnerability scanning on servers or will it do it through CSA?
    Thank you

    Hello Nora
    This would depend on your requirements. As you know MARS has a built-in Nessus Scanner that does 'dynamic vuln scanning' to know more about the OS/services running on hosts; this helps in reducing false positives. Adding the CSA MC to MARS can give similar information and you may optionally exclude the server subnets (with CSA) from the dynamic vuln. scanning range in MARS.
    However there is another aspect to this, lets say you want to monitor all authentication attempts to Apache (and assuming these event types are supported in MARS). This information would come through raw syslogs which could be queried later. If you don't add the Apache server in MARS (as a monitored device), CSA might not send these message to you as it might not have any rules related to these events...I hope you get my point. So in some cases you would need both in others only adding the CSA-MC could suffice.
    Regards
    Farrukh

  • Where can I buy a larger hard drive for my late 2008, 15" macbook pro?  From reviewing questions and answers on the support community it would appear that having Apple remove the old and install the new hard drive is recommended.  But how/where?

    Where can I buy a larger hard drive for my late 2008, 15" macbook pro?  From reviewing questions and answers on the support community it would appear that having Apple remove the old and install the new hard drive is recommended.  But how/where?

    Welcome to Apple Support Communities
    You can install the new hard disk yourself if you want to. You just need a 2'5" SATA II hard drive, which is compatible with your MacBook Pro. You can buy one at OWC > http://eshop.macsales.com/shop/hard-drives/2.5-Notebook/ You can filter hard drives by computer, so press a "Click to view all...", choose your computer in the sidebar and it will give you the compatible hard drives.
    There are different brands for the MacBook Pro. The most recommended are HGST and Seagate, which have good reputation. A 7200 rpm hard drive will give you extra performance

  • Problems with display of preview - and Adobe's tech support.

    Hello, all.
    After quite a bit of struggle I am still experiencing problems with the way Bridge CS5 displays previews. Previews are displayed with rather low quality. By that I mean low resolution that causes images to appear pixelated and out of focus. I've tried every possible setting in Bridge (or at least I think I have) but nothing seems to work. The setting that forces Previews to be built to the specific monitor size of the computer used doesn't work for me as I spend equal amounts of time working between my Macbook Pro 17" and my Apple 30" cinema display that have different resolutions. I've tried this setting and the preview images created on the notebook would not display at all on the 30" display.
    I have contacted support only to find it is nearly non-existent. A voice obviously from someone located in India answered and kept asking what I considered to be basic questions and must have used the word "apologize" at least 20 to 30 times (no exageration) during the 1 hour and 43 minutes we were on the phone to accomplish nothing other than to "register" my complaint.
    What is happening to Adobe ? This is not a joke, a rumor or an angry comment but rather a serious question from a user who has built a professional workflow based on the use of Adobe's products. I have been an user of the Adobe Creative Suite since its very first version and of the individual applications even before then. Bridge is one of the applications I use the most in my workflow that involves the organization of my large database of medical images I keep from my treatments and research. So this is very serious to me. I am now on the phone with Adobe waiting again to speak with someone in technical support. I was told the average waiting time would take between 35 and 50 minutes and I didn't think it would be possible but so far I have been on hold waiting for 1 hour and 7 minutes and someone has yet to answer the phone. What is happening with Adobe ? Is the company about to go out of business ? The last time I remember experiencing such a lack of support from a company I did so when contacting Polaroid and we all know what happened to it.
    To make matters worse I have twice contacted Adobe and asked their technical support agent to remove a phone number that they seem to have mistakenly written as a contact number in my files. More than one month after I registered my support request I finally received an e-mail stating that had tried to contact me at the phone that isn't mine and shouldn't be a part of my records despite the fact I have instructed them twice to remove. There are serious legal implications here as I am bound to confidentiality when it comes to the medical information I manage with my Adobe applications and the idea that someone in technical support may accidentally share this information with a stranger while calling the wrong number is a serious problem.
    What is going on ?
    Outside of this forum I have no idea who to contact and if it is even worthwhile doing so as it may prove to be a huge waste of time.
    Bridge has been a problem application since its inception. In fact the only version of Bridge that seemed to have worked (somewhat) right out of the box was the first one. I have experienced problems with Bridge with every single new version. Previews that don't display properly, crashes, folder hierarchy indicators not displaying properly, and others. The same images display fine if I open them in Apple's OS X Preview or Photoshop CS5. The problem is restricted to Bridge. All images are RAW high-quality images from a professional Canon EOS 1Ds MK II camera with a 17 megapixel full size sensor, and they always look stunning on everything else.
    What is one to do ???
    Sorry about the long post but I am one frustrated user who doesn't know what else to do.
    Thanks,
    Joe

    Hi again, Steve.
    In answer to your questions:
    > What view are you using for the Slideshow (centered, fit screen, fill screen, 100%)?
    Centered.
    > What is the slide duration set to in Slide Show Options, does changing it to manual help?
    I have it always set to manual.
    > What are you're Preferences> Advanced> settings for 'Software Rendering' and 'Monitor Previews' (checked or unchecked)?
    I've tried both choices for both options. My usual default options are 'Software Rendering' unchecked as I have a new Macbook Pro (only a few months old) and the graphics card is powerful enough to handle the previews and 'Monitor Previews'  also unchecked.
    > What are you're Preferences> Cache settings for Options (Keep 100%..., Automatically Export...)?
    ' Keep 100% Previews in Cache ' option - checked
    ' Automatically Export Cache to Folders When Possible ' option - unchecked
    > What resolutions do you have set for both the 17" MBP and 30" ACD?
    Their native resolutions: 1920 x 1200 for the MBP 17" built-in display and 2560 x 1600 for the 30" cinema display.
    > In the Mac System Prefs.> Energy Saver... do you have the Automatic graphics switching checked off ?
    No. I have this option checked for both Battery and Power Adapter.
    On Bridge's interface upper right hand corner I have also selected using one of its pull down menus the following options:
    ' Always High Quality ' and ' Generate 100% Previews '
    Any ideas ???
    Thanks,
    Joe

  • Error. your computer must be running a supported version of Microsoft Visio and a browser that supports opening files directly from Visio Web Access.

    I have the following inside my SharePoint server 2013 :-
    EnterPrise Wiki site collection.
    i have both "Excel services Application "& "Visio Graphics Service" running correctly.
    The problem i am facing is as follow:-
    when a user click on an Excel sheet or Visio document , it will be shown inside the browser without any problem.
    but if the user click on "Open in Visio" OR "Open in Excel" links inside the browser, they will get the following errors:-
    Sorry, but to open this workbook, your computer must be running a supported version of Microsoft Excel and a browser that supports opening files directly from Office Web Apps.
    To open this document, your computer must be running a supported version of Microsoft Visio and a browser that supports opening files directly from Visio Web Access.
    I have the following settings inside my PC:-
    Office 2010 for Excel, word, power point,etc.
    Visio 2013.
    i have disabled SharePoint foundation support for office 2013
    Can anyone advice on this please?

    Hi,
    Please try to reset the Internet Explorer settings or open Internet Explorer in In-Private browsing and then check if this issue occurs.
    If the issue persists, please try to access SharePoint in another computer with Office 2013 and then check if this issue occurs. Or repair Office and restart your server.
    Here is a blog about the same issue for you to take a look at:
    http://sharepointexit.blogspot.com/2013/12/sorry-but-to-open-this-workbook.html
    Best Regards
    Dennis Guo
    TechNet Community Support

  • HT1926 How do I authorize a windows 8/64 but I/explorer computer?The Apple website is way out of date and the support led to an unknown error -42110 and the advice was wrong and inoperable from the support man Gulab

    I have bought a New Computer as my Old one did it's HDD. I now have windows 8/64 bit  I/E 10 and am trying to Authorise my New Computer. I have downloaded the latest version and I got an ""unknown error -42110 "" .I went to te apple website and that says how to deactivate a SC folder or something in windows 7 or windows vista.
    It also says to go to ""store|"" > Authorise Computer"" and I can't get anything,so I contacted  Apple support and I got some person called Gulab who sent me links to the same obsolete apple website which says exactly what I have said above.
    I open iTunes and it lets me login with my apple id and says that I have $78.00 in credit and to be honest I can't understand the updated version/s let alone find how to ""Authorise "" my new computer.Gulab said to delete te sc Folder but the website (Apple) says this ios for windows 7 and windows vista.
    Running around in circles. Apple website needs to be drastically updated instead of updating iTunes .
    Completely confused and so is the support staff....lololooolololol

    (1) There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
    The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
    If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
    Then you'll find the control in the Store menu:
    Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:
    (2) Some discussion on means of locating the SC Info folder on Windows 8 systems in the following topic:
    TS1389 Re: How can you do this in windows 8?

  • HT204088 How can i look up my purchase history on my iphone 4s??? I need to pay an outstanding balance with store credit. I am trying to play games on my phone,and make purchases,but support told me i need to pay the balance with store credit.

    I need help with my itunes on my iphone!!!

    You can only see a cutdown version of your purchase history on your phone (and optionally contact iTunes Support if you have a problem with a purchase) via this page : http://reportaproblem.apple.com - it's only on a computer's iTunes that you can see your full purchase history

  • How do I only show my inbox on email and not all the support folders

    How do I only show my inbox on email and not all the support folders

    There is a third-party program called Attachment Tamer that will do that for you.  In the Terminal, you can type this:
    defaults write com.apple.mail DisableInlineAttachmentViewing -bool yes
    Also note that while Attachment Tamer does some things with the encoding that makes certain email clients display the item as an attachment, what shows up at the receiver's end is solely dependent on their email client and its settings.

  • Windows 8.1 standad (not-Pro/Enterprise) x86 and x64 bit client support

    Can someone from the team please clarify if Windows 8.1 standard (not pro/ent) x86 and x64 computers are supported as full Intune computers?
    I want my small business customers who have BYOD (home computers) that have Windows 8.1 standard (NOT RT) be monitored, managed, AND have the same anti-malware system as the Windows 8.1 Pro/Ent computers.
    This was clearly (and surprisingly) addressed at the Build 2013 conference this year in San Francisco when Intune and OpenMDM was discussed but the updated TechNet pages such as
    http://technet.microsoft.com/en-us/library/jj676630.aspx show that Pro/Ent is required.
    Is there another Intune service update coming that adds support for home computers, is the documentation wrong, or did I misunderstand the keynote and the answers to my follow up questions from that event?
    Thanks!
    -Neil
    neilgo

    Jon,
    Can you address if there is technical issue or if this is a licensing/policy issue?
    I have a lot of prospects who do not have licensing with Home Use Rights - not to mention the management and licensing control of home use rights of the OS is not "cloud controlled". (i.e. nothing easily in place that offers the level of control that say
    Office 365 Pro Plus - which handles provisioning/activation AND deactivation should someone leave the company).
    I find the message hard to explain to customers that home computers running Windows 8 standard clients can't support/run software that Windows 8 Pro clients can. There was a body of messaging that took years to build up about the advantages of domain
    joined clients needing to be "Pro or higher" but in this case the message don't ring correct given we are talking about "personal owned" rather than company owned devices.
    How do I explain that as far as Windows Intune is concerned that Windows 8 standard computers and iOS tablets are the same?
    neilgo

  • Hi, I am trying to install 4 Adobe apps onto a new iMac but Apps in Creative Cloud doesn't list any apps but says there is a download error and to contact customer support.

    Hi, I am trying to install 4 Adobe apps onto a new iMac but Apps in Creative Cloud doesn't list any apps but says there is a download error and to contact customer support.
    I can sign in fine with my username and password.
    Rick

    Hi daveforrestaid,
    Please refer to the threads below where this issue has been addressed:
    1. Creative Cloud "Download Error" message
    2. Creative Cloud - Download error - stubborn error
    Regards,
    Sheena

  • HT1925 I cannot uninstall Bonjour and Quicktime so I can do a complete reinstall of iTunes.  I get an error message stating that both are older versions and to contact technical support.  I am running Windows XP Professional Service Pack 3.

    I am trying to update iTunes on my desktop (running Windows XP Professional Service Pack 3) and I continue to receive an error message stating that the update cannot continue because Bonjour and Quicktime are older versions and to contact technical support.  I have tried repairing both and tried to uninstall iTunes and all of it's componants and still receive the same message.  Any help getting this issue resolved as soon as possible will be much appreciated.   

    (1) Download the Windows Installer CleanUp utility installer file (msicuu2.exe) from the following Major Geeks page (use one of the links under the "DOWNLOAD LOCATIONS" thingy on the Major Geeks page):
    http://majorgeeks.com/download.php?det=4459
    (2) Doubleclick the msicuu2.exe file and follow the prompts to install the Windows Installer CleanUp utility. (If you're on a Windows Vista or Windows 7 system and you get a Code 800A0046 error message when doubleclicking the msicuu2.exe file, try instead right-clicking on the msicuu2.exe file and selecting "Run as administrator".)
    (3) In your Start menu click All Programs and then click Windows Install Clean Up. The Windows Installer CleanUp utility window appears, listing software that is currently installed on your computer.
    (4) In the list of programs that appears in CleanUp, select any Bonjour entries and click "Remove", as per the following screenshot:
    Next, select any QuickTime entries and click "Remove", as per the following screenshot: 
    (5) Quit out of CleanUp, restart the PC and try another iTunes install. Does it go through properly this time?

  • My mini ipod appears off and not respond to any commands when pressed the buttons to reset, apple logo appeared and then the apple support site and it shuts down. already tried all the steps, but none worked, and when I plug it into my computer it does no

    My mini ipod appears off and not respond to any commands when pressed the buttons to reset, apple logo appeared and then the apple support site and it shuts down. already tried all the steps, but none worked, and when I plug it into my computer it does not appear in the iTunes bar. what do I do?

    If MacKeeper corrupted the Recovery partition then even I underestimated its potential for damage. Garbage "cleaning" apps will cause misery but I have not found that the Recovery partition to have been affected by using MacKeeper or anything like it. I doubt that it did so, but I have learned not to underestimate the potential for such things to result in system corruption.
    Before concluding your Mac has a hardware failure, try booting OS X Internet Recovery by holding command option r on startup (three fingers). That will force your iMac to bypass the Recovery partition altogether, and convey the ability to create a new one.
    An Internet connection will be required (wired or wireless).
    At the Mac OS X Utilities screen, select Disk Utility. Select your startup volume (usually named "Macintosh HD") and click the Repair Disk button. Describe any errors it reports in red. If Disk Utility reports "The volume Macintosh HD appears to be OK" in green then you can be reasonably (though not completely) assured your hard disk is in good working order.
    Assuming the HD remains usable you can then use Disk Utility to erase it. Reinstall OS X, restore your essential software and other files, and don't reinstall the junk.

Maybe you are looking for

  • Mail going to the Junk Mail folder but not marked as Junk Mail

    Hi, Hopefully someone can help me. It's something I had done but I don't know what I have done. All of a sudden all my emails from eBay are going directly to my Junk Mail folder, although when I try to click them as 'Not Junk' (Thumbs Up) they are no

  • Site items positioning off in IE*

    I'm trying to transition my current site (www.e-alle.com) to HTML5. In my test page everything works in Safari, but in IE8, the element (nav) is not staying put and as a result is messing up my contract info div. What do I need to do to fix this?

  • Applet in PDF

    Is it possible to embed applet in pdf or any other alternative solution?

  • How to control the time.

    I 'am a Java beginner but already know OOP. I would develop an alarm which helps me to remember my appointment of the day, i.e. I schedule at the 17:00 the dentist appointment, so my application alrm me. I need a class that monitors the clock fo my P

  • Link in e-mail

    Hi after publishing to mobile me I try to tell a friend and get the standard e-mail telling them to click on link below but the link is missing. Anyone please help