Cisco Email Threat Defense & Cisco Cloud Email Security

[fatalXerror]

Hi All,

I am curious about the difference and for which market the Cisco Email Threat Defense and the Cisco Cloud Email Security? Is Cisco ETD just a subset of Cisco CES? Do they have different use cases? Is the Cisco ETD targeted SMB businesses or can be also for enterprise?

It seems to be not so many details circulating over the internet for the Cisco ETD, so I am but confused where to find answers.

Thanks

[Ken Stieers]

Short version: Cloud Email Security is Cisco ESAs and an SMA, hosted by for you by Cisco.  You point your MX records at it, and then direct your outbound mail through it.   Its a security gateway product.

ETD is currently only applicable to M365.  You configure journaling and sends all of your mail to the Cisco cloud where they figure out what's good/bad and pull bad mail out of the mailbox.  ETD can see all mail moving in your environment, so it sees if so someone forwards mail to others, etc, and remove it everywhere when it remediates.  They've put a lot of AI/ML resources in the detections. 

There's sort of a roadmap to the products converging...but that's going to take awhile...

[fatalXerror]

Hi @Ken Stieers , thanks for the reply. But it seems to be the same feature with Cisco CES? What benefits can ETD provide if I already have CES? Thanks

[Ken Stieers]

It's a completely different set of detection engines... so NOT the same. They're doing a lot of AI and machines learning things that aren't possible on the ESA/CES devices.

It can see and remediate mail your users send to one another. ESA/CES only see mail as it comes in, so if your user gets it sends it to 4 people, and then its convicted as a bad email, the ESA can only pull it from the person who got it first... ETD sees the others that got it and can pull it from those mailboxes.



________________________________

This email is intended solely for the use of the individual to whom it is addressed and may contain information that is privileged, confidential or otherwise exempt from disclosure under applicable law. If the reader of this email is not the intended recipient or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited.
If you have received this communication in error, please immediately notify us by telephone and return the original message to us at the listed email address.
Thank You.

[Marwa Abdallah]

could you tell us is CES integrate with Gmail?

[Marwa Abdallah]

Does secure ETD support DLP?