Security Solutions Differentiators

[hbaytie01]

Hello Community,

In this fast-evolving cybersecurity world nowadays. Can anybody really define in the best attractive way the role of the security devices and their differences that we need to propose to customers? It's like a mess nowadays, you don't even know where to start.

1- Firewall

2- IPS

3- Sandboxing

4- WAF

5-EDR

Thanks in advance

[balaji.bandi · Accepted solution]

Each Component has different role, But NGFW Like Firepower all the features or near by.

1- Firewall   - Simple Firewall - you can do Allow, Blocl based on teh requirement. also you can use for VPN purpose depends on requirement and model

2- IPS   -Intrusion Prevention Systems -  sits in network to analyse for thread management

3- Sandboxing  - this is most of the vendor offer now a days, any new malicious content to sanbox for analysing.

4- WAF   - Web Applicaition Firewall, for your reverse proxy or inspecte application traffic inspection.

5-EDR   - Endpoint detection and Responce, - Cisco has AMP4E will do the job here, or any other Good Antivirus should work for you.

Lookat Firepower to start with to understand each component

https://www.cisco.com/c/en/us/products/collateral/security/firepower-ngfw/datasheet-c78-742480.html

https://www.cisco.com/c/en/us/products/security/firewalls/what-is-a-next-generation-firewall.html

EDIT :

Another good one

https://www.cisco.com/c/m/en_us/products/security/firewalls/setup-guide.html