寻找Cisco MARS的替代者

scvmm

　　去年底，Cisco宣布要终结MARS产品，并且订立了最后销售的时间点2011年6月3日。
　　如今，时间已经过去半月多，各位购买了MARS产品的用户们，估计正在考虑找寻MARS的替代产品吧。也就剩下一年了，之后Cisco就不维护MARS的软硬件了。
　　SIEM产品原本就很复杂，从采购到实施到运维都要付出很多，因此，选择SIEM产品应该很慎重，而做SIEM的厂商也要很慎重，要有长期交付的能力。从用户方来说，在选择SIEM类产品的时候应该倾向于选购具有长期交付能力的厂商，具有持续服务能力的厂商。
　　Cisco算是大厂了，幸好他在退出SIEM市场的同时给出了一份详细的系统迁移建议，提出了多种方案供用户选择。但你会那么幸运吗？
　　　　Table 1. End-of-Life Milestones and Dates for the Cisco Security Monitoring, Analysis, and Response System

　　Milestone
　　Definition
　　Date
　　End-of-Life Announcement Date
　　The date the document that announces the end of sale and end of life of a product is distributed to the general public.
　　December 3, 2010
　　End-of-Sale Date
　　The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.
　　June 3, 2011
　　Last Ship Date:
　　HW
　　The  last-possible ship date that can be requested of Cisco and/or its  contract manufacturers. Actual ship date is dependent on lead time.
　　September 1, 2011

　　End of SW Maintenance>　　HW

　　The  last date that Cisco Engineering may>　　June 2, 2012
　　End of Routine Failure Analysis Date:
　　HW
　　The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect.
　　June 2, 2012
　　End of New Service Attachment Date:
　　HW
　　For  equipment and software that is not covered by a service-and-support  contract, this is the last date to order a new service-and-support  contract or add the equipment and/or software to an existing  service-and-support contract.
　　June 2, 2012
　　End of Signature Updates
　　The  last date to receive new signature updates and signature support for  the product. After this date, new signature updates are unavailable.
　　June 2, 2014
　　End of Service Contract Renewal Date:
　　HW
　　The last date to extend or renew a service contract for the product.
　　August 29, 2015
　　Last Date of Support:
　　HW
　　The  last date to receive service and support for the product. After this  date, all support services for the product are unavailable, and the  product becomes obsolete.
　　June 30, 2016
HW = Hardware OS SW = Operating System Software App. SW = Application Software