Together with the Cisco Security Manager (CSM) product, MARS made up the two primary components of the Cisco Security Management Suite.
MARS was an appliance-based solution that provided insight and control of existing security deployments.
It could monitor security events and information from a wide variety of sources, including third-party devices and hosts.
The correlation engine in MARS could identify anomalous behavior and security threats and could use large amounts of information collected for forensics analysis and compliance reporting.
MARS centrally aggregates logs and events from a wide range of popular devices: