Hello @SorimBela,
some input to help you with your decision.
Note: Secure Endpoint can be used as a single product, but the EDR/XDR capabilities combined with SecureX are bringing the big advantages for customers.
- Secure Endpoint integrates into SecureX.
- SecureX provides hunting tools like the Ribbon App, Threat Response, 3rd Party Modules and the Pivot Menu.
- The Architetecture provides very useful integrations. There are 4 short explanation videos available, how SecureX, Umbrella and the Endpoint are working together: https://cisco.app.box.com/v/ATSPartners/file/725986224011
- You may review the whole list of integrations here: https://www.cisco.com/c/en/us/products/security/threat-response/partners-integrations.html#~integrations
- Device Insight (available in SecureX soon) will provide much more information about all devices in the environment.
- Orchestration allows to generate powerfull Seccurity Workflows to automate security. Usecase 4 of the videos shows how Secure Endpoint, SecureX, Umbrella and WebEx can be used to automate Security.
- Secure Endpoint provides automated post infection tasks like disconnecting the endpoint from the network or generating a Forensic Snapshot (Orbital required)
- Orbital is the Live forensic tool available for the endpoint.
To learn the hunting capabilities, you may register to a Cisco Threat Hunting Workshop: https://threathuntingworkshop.com/
This are the available Cisco native integrations today.
Greetings,
Thorsten
