Integrated Security Platform

Threat Response is not a SIEM, but it can work alongside a SIEM to speed up investigations. For instance, via the browser plugins, Threat Response provides additional response capabilities directly from within the web-based interfaces of a SIEM. Lear...

Threat Response has out-of-the-box integrations for a growing list of Cisco Security products, so that you can get more from your investments when they are already working together. Currently, these products include AMP for Endpoints, Umbrella, Firep...

In addition to the North American Threat Response data center, Threat Response is available in the EU and APJC regions. Learn more about Threat Response here, or check out other FAQs here. 

Threat Response is a cloud-based solution that can integrate with selected cloud and on-premise solutions. Learn more about Threat Response here, or check out other FAQs here. 

Threat Response leverages an integrated security architecture that automates integrations across select Cisco Security products. It can help you accelerate key security operations functions: detection, investigation, and remediation. Learn more about...

Hi Sir, I have already authorized the domain. Do I MUST register each service's IP address(e.g., www, mail)? Thanks. Justin

Hello everybody, does anybody know, if the botnet dynamic-filter reports are cleared after ASA updateand reload or only after reload?  (show dynamic-filter reports top botnet-sites show dynamic-filter reports top infected-hosts show dynamic-filter r...