O'Reilly logo

Security Monitoring with Cisco Security MARS by Greg Kellogg, Gary Halleen

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 12. CS-MARS Global Controller

A global controller (GC) provides several key capabilities that are important in a larger Cisco Security Monitoring, Analysis, and Response System (CS-MARS) deployment. As you’ve learned in previous chapters, many organizations can be successful with a single CS-MARS appliance. However, for various reasons, it is often desirable to have a distributed deployment instead, with a centralized console that controls the various local controllers (LC).

The following is a list of some of the reasons why you might want to deploy a GC:

Large amount of event data—If your reporting devices send more events per second than a single MARS local controller can process, this load can be distributed across more local controllers. ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required