Chapter 12. CS-MARS Global Controller
A global controller (GC) provides several key capabilities that are important in a larger Cisco Security Monitoring, Analysis, and Response System (CS-MARS) deployment. As you’ve learned in previous chapters, many organizations can be successful with a single CS-MARS appliance. However, for various reasons, it is often desirable to have a distributed deployment instead, with a centralized console that controls the various local controllers (LC).
The following is a list of some of the reasons why you might want to deploy a GC:
• Large amount of event data—If your reporting devices send more events per second than a single MARS local controller can process, this load can be distributed across more local controllers. ...
Get Security Monitoring with Cisco Security MARS now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
