Chapter 7. Archiving and Disaster Recovery

Cisco Security Monitoring, Analysis, and Response System (CS-MARS) appliances are built with a fair amount of redundancy, especially if you’re deploying one of the larger models, such as the MARS-100/100e or MARS-200, both of which have the following features:

• Dual power supplies

• Redundant Array of Independent Disks (RAID) 1+0 hard-disk arrays

• Multiple processors

Even with this built-in redundancy, you still need to plan for disaster recovery. You need to consider the process of recovering from a hardware failure of the MARS appliance, in addition to how to recover from a larger-scale disaster, such as a fire, earthquake, or flood. All recovery plans should be well documented and tested, and MARS ...

Get Security Monitoring with Cisco Security MARS now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.