Why is the multiple devices window displayed during policy lookup?
A. Although CS-MARS tries to identify a unique device by matching the host name, domain name, and reporting IP address of the device that generated the event against the corresponding details in Security Manager, the multiple devices window is displayed when there are two or more devices that match the device lookup process between CS-MARS and Security Manager. From the multiple devices window, you can select the device for which you want to view and modify the configured access rules.