When there are thousands of nodes in a network, finding malware can be daunting. Administrators use layers of security for handling defense – intelligence, sandboxing, quarantining. But an evolving threat landscape leads eventually leads to ineffective and isolated security solutions.
Cisco Advanced Malware Protection (AMP) offers an integrated, comprehensive approach to endpoint security. Continuous analysis and telemetry features keep its finger on the pulse of network anomalies, and all suspicious activity is investigated. Contextual reporting highlights trends for administers, helping them reassess network architecture to close vulnerable points of entry. Also important is its flexible deployment, which makes it simple for any organization to tailor its endpoint security.
Key Findings
- Metasploit malicious document detected and quarantined with full protection enabled
- Kovter malware detected and blocked with full protection enabled, with behavioral-only protection and during post-infection mitigation
- Locky ransomware was blocked with either full or behavioral-only protection enabled
- Retrospection engine provides insightful detection and response capabilities
- Mimikatz Rubber Ducky exploit detected and blocked with either full or behavioral-only protection enabled
Read more about how Cisco Advanced Malware Protection (AMP) earned the Miercom Performance Verified accreditation and review the testing results.