[c-nsp] Cisco MARS vs. Q1 Qradar - and other vendors

[Dean Perrine]

Does anyone have some input on security event correlation systems?

Currently reviewing Cisco MARS vs. Q1 Labs QRadar.

Environment information:
Very large DMVPN, IPS's, FW's, CSM.

Thanks,

==========================
Dean Perrine