Phishing Capability of ESA & CAPP

[Muhammad Awais Khan]

Hello Experts,

I want to find out untill what level ESA/CES is good for detecting a Phishing Email and which type of attacks cannot detect by ESA so we can opt for Cisco Advance Phishing Protection.

The scenario which i am exploring is where email came from legitimate domains like dropbox, Onedrive.

[marc.luescherFRE · Accepted solution]

Hi there,

there is a long and a short answer.

We believe there is NO solution available on the market which will 100% protect you from such attacks. Our approach is a 3 tier email security solution with SMTP paket inspection, an email SEC GW and and third level of threat investigation prior to delivery.

All data is uploaded to a SIEM for central analysis and action.

To answer your question CES and APP will provide since 2020 Release of APP a very robust threat protection from phishing and BEC attacks on top of CES. If you need a good working solution this is definitely the way to go. Agari the partner providing this has been around and the two solution compliment nicely.

-Marc

[Muhammad Awais Khan]

thank you @marc.luescherFRE! 

It do make sense for having 3 tier security to achieve good security posture for email threats