TechValidate Research on Cisco Advanced Malware Protection

Introduction

This case study of TMB Bank Public Company is based on a March 2017 survey of Cisco Advanced Malware Protection customers by TechValidate, a 3rd-party research service.

Challenges

The business challenges that led the profiled company to evaluate and ultimately select Cisco Advanced Malware Protection:

• Chose AMP for Endpoints for the following reasons:
  • Superior protection from advanced threats and hackers
  • Rapid time to detection of threats
  • Endpoint visibility into file activity and threats
  • Ability to continuously monitor file behavior
  • Retrospective alerting to uncover stealthy attacks
  • Ability to quickly understand the threat and what it’s trying to do
  • Simple, easy to use management interface

Use Case

The key features and functionalities of Cisco Advanced Malware Protection that the surveyed company uses:

• Deployed the following in addition to AMP for Endpoints:
  • AMP for Networks (AMP on Cisco Firepower NGIPS)
  • Cisco Umbrella (OpenDNS Umbrella)
  • Cisco Threat Grid

Results

The surveyed company achieved the following results with Cisco Advanced Malware Protection:

• Was able to do the following with AMP for Endpoints:
  • Improve security effectiveness
  • Prevent breaches
  • Detect threats faster
  • Increase visibility into potential threats
  • Remediate advanced malware
  • Accelerate incident response
  • Reduce management complexity using Cisco AMP’s integrated architecture
• Evaluated the following companies prior to signing up with AMP for Endpoints:
  • Carbon Black
  • Palo Alto
  • Symantec
• Prevented/Detected/Defeated the following with AMP for Endpoints:
  • Advanced malware or advanced persistent threats (APTs)
  • Zero-day threats
  • Ransomware
  • Malicious email attachments
• Reduced threat detection time by more than 6 hours with AMP for Endpoints.
• Experienced improvements in the following areas after deploying AMP for Endpoints:
  • Mean time to detection of previously unseen and/or unknown threats
  • Breach probability and business risk
  • Organization’s security posture
  • Executive confidence in the security of the organization
  • Investigation speed and/or quality
  • Visibility into endpoints, vulnerabilities, and threats
  • Fewer false alerts
  • Time to remediation

Introduction

This case study of Saudi Arabia National Guard (SANG) is based on an April 2017 survey of Cisco Advanced Malware Protection customers by TechValidate, a 3rd-party research service.

Challenges

The business challenges that led the profiled organization to evaluate and ultimately select Cisco Advanced Malware Protection:

• Chose AMP for Endpoints for the following reasons:
  • Superior protection from advanced threats and hackers
  • Endpoint visibility into file activity and threats
  • Ability to continuously monitor file behavior
  • Simple, easy to use management interface

Use Case

The key features and functionalities of Cisco Advanced Malware Protection that the surveyed organization uses:

• Deployed the following in addition to AMP for Endpoints:
  • AMP for Networks (AMP on Cisco Firepower NGIPS)
  • Cisco Threat Grid

Results

The surveyed organization achieved the following results with Cisco Advanced Malware Protection:

• Was able to do the following with AMP for Endpoints:
  • Improve security effectiveness
  • Prevent breaches
  • Increase visibility into potential threats
• Evaluated the following company prior to signing up with AMP for Endpoints:
  • TrendMicro
• Prevented/Detected/Defeated the following with AMP for Endpoints:
  • Advanced malware or advanced persistent threats (APTs)
  • Zero-day threats
  • Ransomware
  • Malicious email attachments
• Reduced threat detection time by by more than an hour with AMP for Endpoints.
• Experienced improvements in the following areas after deploying AMP for Endpoints:
  • Mean time to detection of previously unseen and/or unknown threats
  • Executive confidence in the security of the organization
  • Visibility into endpoints, vulnerabilities, and threats
  • Fewer false alerts
  • Time to remediation