TechValidate Research on Cisco Advanced Malware Protection

Introduction

This case study of Maple Lodge Farms Ltd. is based on a January 2020 survey of Cisco AMP for Endpoints customers by TechValidate, a 3rd-party research service.

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Cisco AMP for Endpoints:

• Invested in Cisco AMP for Endpoints because they:
  • Needed to protect against advanced threats
  • Needed to improve security operations efficiency
  • Wanted to increase threat detection and remediation speed and accuracy
  • Needed to be able to respond to incidents faster
  • Needed tools to enhance their threat hunting capabilities
• Considered the following vendors before selecting Cisco AMP for Endpoints:
  • Sophos

Use Case

The key features and functionalities of Cisco AMP for Endpoints that the surveyed company uses:

• Other Cisco Security products used in addition to Cisco AMP for Endpoints:
  • Umbrella
  • Email Security
  • NGFW (Next-Generation Firewall)
  • AnyConnect
  • ISE (Identity Services Engine)
• Rates Cisco AMP for Endpoints on the following features:
  • Antivirus feature: blocking known malware: very satisfied
  • Exploit prevention feature: protecting against file-less malware: extremely satisfied
  • Threat detection and response feature: continuous file monitoring (file and device trajectory): very satisfied
  • Threat intelligence: ability to understand unknown threats to their environment: extremely satisfied
  • Multi-platform/OS support: very satisfied

Results

The surveyed company achieved the following results with Cisco AMP for Endpoints:

• Most prominent benefits realized from their investment in Cisco AMP for Endpoints:
  • Realized better overall protection/prevention against file-less malware, ransomware, and other advanced threats
  • Improved security operations efficiency
  • Experienced faster and more accurate threat detection and remediation
  • Experienced faster, more effective incident response
  • Enhanced threat hunting capabilities
• Experienced the following after implementing Cisco AMP for Endpoints:
  • Reduced security risks: greater than 75%
  • Improved security operations efficiency: greater than 75%
  • Improved threat detection and remediation speed and quality: greater than 75%
  • Improved incident response speed and effectiveness: 50% to 74%
  • Reduced costs and increased staff productivity by simplifying complex endpoint security management tasks: 50% to 74%
• Cisco AMP for Endpoints helped their security team to better protect their environment from:
  • Zero-day threats
  • Ransomware
  • Cryptomining
  • File-less malware
  • Drive-by-attacks
• Their confidence in protecting their endpoints against malware and other threats has very significantly improved now that they have Cisco AMP for Endpoints as part of their security strategy.
• Reduced their time to detection of threats by up to 12 hours after implementing Cisco AMP for Endpoints.

Introduction

This case study of a S&P 500 insurance company is based on a January 2020 survey of Cisco AMP for Endpoints customers by TechValidate, a 3rd-party research service. The profiled company asked to have their name blinded to protect their confidentiality.

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Cisco AMP for Endpoints:

• Invested in Cisco AMP for Endpoints because they:
  • Needed to protect against advanced threats
  • Needed to improve security operations efficiency
  • Needed tools to enhance their threat hunting capabilities
• Considered the following vendors before selecting Cisco AMP for Endpoints:
  • Microsoft
  • Carbon Black
  • TrendMicro

Use Case

The key features and functionalities of Cisco AMP for Endpoints that the surveyed company uses:

• Other Cisco Security products used in addition to Cisco AMP for Endpoints:
  • Threat Response
  • Email Security
  • Threat Grid
  • NGFW (Next-Generation Firewall)
  • ISE (Identity Services Engine)
• Rates Cisco AMP for Endpoints on the following features:
  • Antivirus feature: blocking known malware: very satisfied
  • Exploit prevention feature: protecting against file-less malware: very satisfied
  • Threat detection and response feature: continuous file monitoring (file and device trajectory): very satisfied
  • Threat intelligence: ability to understand unknown threats to their environment: very satisfied
  • Multi-platform/OS support: very satisfied

Results

The surveyed company achieved the following results with Cisco AMP for Endpoints:

• Most prominent benefits realized from their investment in Cisco AMP for Endpoints:
  • Realized better overall protection/prevention against file-less malware, ransomware, and other advanced threats
  • Improved security operations efficiency
• Experienced the following after implementing Cisco AMP for Endpoints:
  • Reduced security risks: 50% to 74%
  • Reduced costs and increased staff productivity by simplifying complex endpoint security management tasks: 50% to 74%
• Cisco AMP for Endpoints helped their security team to better protect their environment from:
  • Zero-day threats
  • Ransomware
  • Cryptomining
  • File-less malware
  • Drive-by-attacks
• Their confidence in protecting their endpoints against malware and other threats has significantly improved now that they have Cisco AMP for Endpoints as part of their security strategy.
• Reduced their time to detection of threats by more than a day after implementing Cisco AMP for Endpoints.