寻找Cisco MARS的替代者

去年底，Cisco宣布要终结MARS产品，并且订立了最后销售的时间点2011年6月3日。

如今，时间已经过去半月多，各位购买了MARS产品的用户们，估计正在考虑找寻MARS的替代产品吧。也就剩下一年了，之后Cisco就不维护MARS的软硬件了。

SIEM产品原本就很复杂，从采购到实施到运维都要付出很多，因此，选择SIEM产品应该很慎重，而做SIEM的厂商也要很慎重，要有长期交付的能力。从用户方来说，在选择SIEM类产品的时候应该倾向于选购具有长期交付能力的厂商，具有持续服务能力的厂商。

Cisco算是大厂了，幸好他在退出SIEM市场的同时给出了一份详细的系统迁移建议，提出了多种方案供用户选择。但你会那么幸运吗？

Table 1. End-of-Life Milestones and Dates for the Cisco Security Monitoring, Analysis, and Response System

Milestone	Definition	Date
End-of-Life Announcement Date	The date the document that announces the end of sale and end of life of a product is distributed to the general public.	December 3, 2010
End-of-Sale Date	The last date to order the product through Cisco point-of-sale mechanisms. The product is no longer for sale after this date.	June 3, 2011
Last Ship Date: HW	The last-possible ship date that can be requested of Cisco and/or its contract manufacturers. Actual ship date is dependent on lead time.	September 1, 2011
End of SW Maintenance Releases Date: HW	The last date that Cisco Engineering may release any final software maintenance releases or bug fixes. After this date, Cisco Engineering will no longer develop, repair, maintain, or test the product software.	June 2, 2012
End of Routine Failure Analysis Date: HW	The last-possible date a routine failure analysis may be performed to determine the cause of hardware product failure or defect.	June 2, 2012
End of New Service Attachment Date: HW	For equipment and software that is not covered by a service-and-support contract, this is the last date to order a new service-and-support contract or add the equipment and/or software to an existing service-and-support contract.	June 2, 2012
End of Signature Updates	The last date to receive new signature updates and signature support for the product. After this date, new signature updates are unavailable.	June 2, 2014
End of Service Contract Renewal Date: HW	The last date to extend or renew a service contract for the product.	August 29, 2015
Last Date of Support: HW	The last date to receive service and support for the product. After this date, all support services for the product are unavailable, and the product becomes obsolete.	June 30, 2016

HW = Hardware OS SW = Operating System Software App. SW = Application Software