What are the types of CS-MARS events for which the Security Manager icon is displayed?
A. The Security Manager policy table lookup icon in CS-MARS is displayed only for traffic logs triggered by the following event types: –Access rules from a PIX Firewall, ASA device, IOS router, or an FWSM blade, regardless of whether the 5-tuple information is available or not. If the 5-tuple data cannot be derived from the syslog, the most accurate match is displayed after policy table lookup. –Connection establishment and tear-down using TCP, UDP, and ICMP on PIX, ASA, and FWSM devices. –Signatures from IPS and IOS IPS devices.
