Cisco Security Monitoring, Analysis, and Response System (MARS) appliance and SW Netflow

DavidInNewOrleans

I am a new user of the Orion Network Performance with Netflow. We are also going to purchase the Cisco MARS. Has anyone integrated the two. Should the MARS read from Solor Winds (SW) or you should I have the MARS get it's own netflow data directly from the routers? Am I going to have redundants system using both the SW Netflow product and the MARS? I suspect there is some overlap. Should I keep both or scrap one for the other?

Thanks in advance.

Network_Guru

The two tools do not integrate as they perform separate functions.
They will both need to be setup to receive flows from your routers.

MARS is a network analyzing/alerting tool.
Orion is a node reporting/monitoring/alerting tool.

HTH