19-27
User Guide for Cisco Security MARS Local Controller
78-17020-01
Chapter 19 Incident Investigation and Mitigation
Layer 2 Path and Mitigation Configuration Example
Figure 19-23
Mitigation Information screen
This screen contains information about the device, along with recommended policies or commands for
mitigating the compromised host (in the example, 10.1.252.250).
Step 2
If the device where the mitigation command to be downloaded is a Layer 2 device (such as in the example
Mitigation Confirmation Dialog
), a red
Push
button appears that you can click to mitigate the
compromised host. If you select the push button, the
Mitigation Confirmation Dialog
appears.
Note
If the device where the mitigation command to be downloaded is a Layer 3 device, the
Push
button
shown in red on the
Mitigation Information screen
is greyed out and you must use the suggested
commands directly on the device to mitigate the compromised host.
