We are missing the Web Security Appliance (WSA)from Cisco that can help on here! Even if the communication channel was encrypted like downloading a file from an HTTPS site WSA could catch the file and get the AMP reputation or the AMP File Analysis in the case is needed.
Im working with an ASA 5516X with firepower services, i got de amp license, and i want to know if AMP is able to detect a malware that is in an attached file in a email.
It depends on the licensing. You must have at least TAM or TAMC to have malware detection services. The 'M" indicates malware prevention Other licensing such as TA and TAC do not have the malware detection capability. www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Licensing.html#98698
AMP for Endpoints is one of the many components of Cisco Ransomware Defense solution. For more details, see www.cisco.com/c/m/en_sg/solutions/security/ransomware-defense/index.html#~stickynav=5
Each product is licensed individually, the solution just shows how they function better together to defend against ransomware. There are enterprise licensing bundles available.
Great clear explanation of whole scenario and available solutions. Excellent
We are missing the Web Security Appliance (WSA)from Cisco that can help on here! Even if the communication channel was encrypted like downloading a file from an HTTPS site WSA could catch the file and get the AMP reputation or the AMP File Analysis in the case is needed.
great and very clear report. thanks a lot
Great presentation!!
Im working with an ASA 5516X with firepower services, i got de amp license, and i want to know if AMP is able to detect a malware that is in an attached file in a email.
It depends on the licensing. You must have at least TAM or TAMC to have malware detection services. The 'M" indicates malware prevention
Other licensing such as TA and TAC do not have the malware detection capability.
www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Licensing.html#98698
I have the Cisco Meraki switches. How do I know they are active and protecting our office?
The MS series switches do not, but the MX security appliances will. What is protecting your Internet edge?
Will this overlap with AMP for endpoints product?
AMP for Endpoints is one of the many components of Cisco Ransomware Defense solution. For more details, see www.cisco.com/c/m/en_sg/solutions/security/ransomware-defense/index.html#~stickynav=5
does the ransomware exist on Unix system?
How does the licensing model work?
Each product is licensed individually, the solution just shows how they function better together to defend against ransomware. There are enterprise licensing bundles available.
man please check you're doctor cause you have a very heavy breathing issue's