Re: PAT address user identification: methods?

[Gary Flynn <flynngn () JMU EDU>]

Tristan RHODES wrote:

> Greetings,
>
> We also have ran into the problem of PAT translation obscuring the
> original internal IP addresses.
>
> We are in the process of installing a Cisco MARS device, which we
> believe will automatically keep track of PAT translations.
>
> Has anyone else deployed MARS (formerly Protego Networks)?

We've had it installed a few months and are getting ready to
seriously start tuning it for production. It definitely shows
potential.

--
Gary Flynn
Security Engineer
James Madison University
www.jmu.edu/computing/security