Best for endpoint protection?

SorimBela — Wed, 14 Jul 2021 05:44:16 GMT

My shop utilizes cisco firepower and umbrella. We have to make a decision on an endpoint protection product. Since we’re using the other cisco products would it be best to go with Cisco AMP? The current endpoint product is from another vendor, but with the subscription ending in a few months we can make the switch to AMP if we want to go all cisco.

Re: Best for endpoint protection?

Troja007 — Wed, 14 Jul 2021 06:49:50 GMT

Hello @SorimBela,
some input to help you with your decision. 🙂
Note: Secure Endpoint can be used as a single product, but the EDR/XDR capabilities combined with SecureX are bringing the big advantages for customers.

Secure Endpoint integrates into SecureX.
SecureX provides hunting tools like the Ribbon App, Threat Response, 3rd Party Modules and the Pivot Menu.
- The Architetecture provides very useful integrations. There are 4 short explanation videos available, how SecureX, Umbrella and the Endpoint are working together: https://cisco.app.box.com/v/ATSPartners/file/725986224011
- You may review the whole list of integrations here: https://www.cisco.com/c/en/us/products/security/threat-response/partners-integrations.html#~integrations
- Device Insight (available in SecureX soon) will provide much more information about all devices in the environment.
- Orchestration allows to generate powerfull Seccurity Workflows to automate security. Usecase 4 of the videos shows how Secure Endpoint, SecureX, Umbrella and WebEx can be used to automate Security.
Secure Endpoint provides automated post infection tasks like disconnecting the endpoint from the network or generating a Forensic Snapshot (Orbital required)
Orbital is the Live forensic tool available for the endpoint.

To learn the hunting capabilities, you may register to a Cisco Threat Hunting Workshop: https://threathuntingworkshop.com/

This are the available Cisco native integrations today.

Greetings,
Thorsten

topic Re: Best for endpoint protection? in Endpoint Security

Best for endpoint protection?

Re: Best for endpoint protection?