|
I currently have [xx] amount of Cisco security products. Won’t those protect me from malware?
|
Your existing security products will certainly help protect you. However, malware attacks are evolving at a rapid pace. Their attack vectors alone are increasing as malware becomes more sophisticated.
Because of this, the Breach Defense solution encompasses multiple products that protect you at the DNS layer and your network, email, web, and endpoints. Combined with our industry-leading Talos threat research, having the full solution significantly decreases your chances of an attack.
May I ask what products you already have deployed? (Compare and contrast with the solution product list.)
|
|
With malware attacks rapidly increasing in their volume and sophistication, there is still a chance I may be infected. What happens then?
|
In the worst-case scenario of an infection, dynamic segmentation with Cisco TrustSec (via Network as a Sensor and Network as an Enforcer)* can block ransomware from moving broadly once it is inside your network. This is vital in helping ensure it cannot run rampant in your network and affect a majority of systems. Cisco malware protection services (AMP + Threat Grid) provide the ability to retrospectively remove the malware from endpoints where it has been seen. This means that in a worst-case scenario, one of two endpoints might be affected during the discovery process, and then the defense in-depth approach removes the malware from endpoints where it might be sitting dormant.
|
|
What about security for branch locations?
|
Umbrella is integrated with Cisco SD-WAN solution to provide an initial layer of protection for locations requiring direct Internet access but also protection against ransomware. Cisco Firepower Threat Defense for ISR, including AMP, can also be activated, increasing the "HQ-level" security at the branch. These reduce WAN costs with no need to backhaul traffic.
|