Because we do have the Email Security appliance and it is integrated with Threat Response, we have everything tied together. This is key to our security and maximizing operations. We have a Cisco Enterprise Agreement with access to Cisco Email Security, Cisco Firepower, Cisco Stealthwatch, Cisco Talos, Cisco Threat Grid, Cisco Umbrella, and also third-party solutions. It allows for research into a threat, and you can chart your progress on how you're resolving it." "Integration is a key selling factor for Cisco security products. What you would do otherwise would be very risky and tedious." "It is extensive in terms of providing visibility and insights into threats. If you can do that in a secure sandbox environment, that's an invaluable feature. We're trying, for example, to determine, when people send information in, if an attachment is legitimate or not. This is what makes the solution a valuable tool as far as I'm concerned." "The ability to detonate a particular problem in a sandbox environment and understand what the effects are, is helpful. You still have the ability to manage and remediate things. No matter where the device is, AMP has still got coverage on it and is protecting it.
You get protection and reporting with it. AMP will work anywhere in the world, as long as it has an Internet connection. You don't have to be VPNed into the environment for AMP to work. It doesn't matter where the device is in regards to whether it's inside or outside of your network environment, especially right now when everybody's remote and taken their laptops home. It also has a File Trajectory, so you can even see if that file has been found on any of your other computers that have AMP." "One of the best features of AMP is its cloud feature. It shows every running process and file access on the computer and saves it like a snapshot when it detects something malicious. It shows the point in time when a virus is downloaded, so you can see if the user was surfing the internet or had a program open. And on the scalability side, we can integrate well with the SIEM orchestration engine and a number of applications that are proprietary or open source." "The entirety of our network infrastructure is Cisco and the most valuable feature is the integration." "Another of my favorite features is called the Device Trajectory, where it shows everything that's going on, on a computer. "Among the most valuable features are the exclusions.
0 kommentar(er)
