

You don't want to be spending time working out how to block something.

Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us." "The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. We're no longer looking at digging into information or wading through hundreds of incidents.
Zonealarm security engine free manual#
We can then choose to take any manual actions, if we want, or start our investigation. Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. It allows for research into a threat, and you can chart your progress on how you're resolving it." "The threat Grid with the ability to observe the sandboxing, analyze, and perform investigations of different malicious files has been great." "Any alert that we get is an actionable alert. And on the scalability side, we can integrate well with the SIEM orchestration engine and a number of applications that are proprietary or open source." "It is extensive in terms of providing visibility and insights into threats. This greatly maximizes our security operations." "Among the most valuable features are the exclusions. With SecureX, we are able to pull all those applications into one pane for visibility and maintenance. Additionally, we are using the Cisco SecureX platform, as we were a beta test for that new solution. Because we do have the Email Security appliance and it is integrated with Threat Response, we have everything tied together. This is key to our security and maximizing operations. We have a Cisco Enterprise Agreement with access to Cisco Email Security, Cisco Firepower, Cisco Stealthwatch, Cisco Talos, Cisco Threat Grid, Cisco Umbrella, and also third-party solutions. "Integration is a key selling factor for Cisco security products.
