MARS - Implementing Cisco Security Monitoring, Analysis and Response System

This two-day instructor-led course provides students with the skills to make effective use of network and security devices by combining network intelligence, context correlation, vector analysis, anomaly detection, hotspot identification and automated mitigation capabilities. Furthermore, this course teaches students how the CS MARS solutions empower customers to readily and accurately identify, manage and eliminate network attacks and maintain network compliance.

Cisco Security Mitigation and Response System (CS MARS) is a group of high performance, scalable appliances for threat management, monitoring and mitigation.

After completing this course participants can register to sit the (MARS) 642-545 exam.

Module 1:
• MARS Introduction and Task Flow

Module 2:
• Accessing MARS 20 Appliance

Module 3:
• Configuring Administration Tasks in the MARS System using User Interface

Module 4:
• Adding Cisco, and non-Cisco Reporting Devices into MARS

Module 5:
• Configure MARS for Incident Investigation

Module 6:
• Creating Queries and Sending Alerts

Module 7:
• Generating Summary Reports

Module 8:
• Using MARS User Interface to Configure Rules, Management and System Maintenance Features

Module 9:
• Distributed Threat Mitigation Lab

Module 10:
• Creating Custom Parser

Module 11:
• MARS Global Controller

This course is intended for Network Administrators responsible for user management and network security.

Before attending this course, students must have:

• Completed their CCSP certification or have fundamental knowledge of implementing network security
• Completed their CCNA certification or have working knowledge of routing and switching