Everyone Hates Ransomware Endpoint Security Reginald Liger Cyber

Everyone Hates Ransomware Endpoint Security Reginald Liger Cyber. Security Sales Specialist May 23 rd, 2018

Security that works together Cisco Security Architecture Threat Intelligence - TALOS Network Endpoint Services

Endpoint Devices Increasingly Difficult to Defend Most challenging areas to defend: 57% Mobile Devices 56% Cloud Data 56% User Behavior *Source: Cisco 2018 Security Capabilities Benchmark Study © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Many endpoint solutions claim to block 99% of threats © 2018 Cisco and/or its

But what about the © 2018 Cisco and/or its affiliates. All rights reserved. Cisco

How does that 1% get through? Advanced evasion techniques: • • Fileless malware Environmentally-aware malware Polymorphism Exploit legitimate processes © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Uncover the 1% with Cisco AMP for Endpoints Stop Malware Using multiple detection and protection mechanisms Eliminate Blind Spots Discover Unknown Threats The network and endpoint, working together across all operating systems With proactive threat hunting © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Stop Malware Using multiple detection and protection mechanisms © 2018 Cisco and/or its affiliates.

How we… Prevent Detect Reduce Risk • Antivirus • Static analysis • Vulnerable software • Fileless malware detection • Sandboxing • Low prevalence • Cloud lookups (1: 1, 1: many) • Malicious Activity Protection • Proxy log analysis • Client Indicators of Compromise • Machine learning • Device flow correlation • Cloud Indicators of Compromise © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Cloud-based analysis AMP cloud constantly updated with the latest threat intelligence and research to protect against advanced threats. Talos Threat Grid AMP Cloud © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Prevent fileless malware Malware has evolved. We need to protect against more than just files. Monitor process activity and guard against attempts to hijack legitimate applications. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Eliminate Blind Spots The network, web, email and endpoints, working together across all operating

See once, block everywhere Share intelligence across network, web, email, and endpoints to see once, block everywhere. Talos NGFW NGIPS © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential AMP Cloud ISR Endpoint Threat Grid CES/ESA WSA/SIG

Holistic view of endpoints Regardless of operating system – from servers to desktop to

Agentless detection with proxy analysis Identify anomalous traffic occurring within your network Vo. IP Phones © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential Printers Security Cameras Thermostats

Accolades UNC Pembroke © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner

“AMP is catching things that our previous endpoint protection didn’t catch. ” George Mitchell Head of Research and Development, Mobile (Alabama) County Public School System © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Compliance • Cisco AMP for Endpoints meets and exceeds the capabilities of a traditional antivirus solution required for PCI and HIPAA compliance • Detailed white paper available outlining how AMP exceeds the requirements of PCI DSS v 3. 2 and the HIPAA Security Rule • Covers Windows, Mac, Linux, Android, and i. OS “AMP undeniably meets and exceeds PCI and HIPAA requirements. ” - Qualified Security Assessor © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Q&A with the Panel Who has the first question? © 2018 Cisco and/or its

Demo – Discover Unknown Threats With proactive threat hunting © 2018 Cisco and/or its

Dynamic analysis and sandboxing Execute, analyze, and test malware behavior in order to discover previously unknown zero-day threats Suspicious File AMP for Endpoints © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential Analysis Report Threat Grid

Continuous monitoring What happened? Where did the malware come from? Where has the malware been? What is it doing? How do we stop it? © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Perform in-depth investigations Threat hunting One click remediation Intelligence correlation © 2018 Cisco and/or

AMP for Endpoints Next-Generation Endpoint Security 1% See what you’ve been missing © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential • Prevention, Detection, and Response in a single solution • See the 1% everyone else misses • Rapid deployment in the cloud or on-premises • Reduce time to detection <4 hours • Automated remediation: see once, block everywhere • Broad platform coverage to protect your business

cisco. com/go/ampendpoint

Accolades • Cisco named a ‘Visionary’ in 2018 Magic Quadrant for Endpoint Protection Platforms • NSS Labs provides ‘Recommended’ rating in 2018 Advanced Endpoint Protection test • NSS Labs finds AMP has fastest time to detection 3 years in a row, Breach Detection Test • IDC names AMP for Endpoints a Leader in Endpoint Specialized Threat Analysis and Protection, 2017 vendor assessment © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

Customers Love AMP for Endpoints Techvalidate Customer Survey The Response • Recipients: 8, 500 AMP for Endpoints users • Responses: 1047 • Response Rate: 13% • Volunteer References: 113 https: //www. techvalidate. com/collections/amp-for-endpoints-survey-results © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential

See how we stack up against the competition Cisco AMP for Endpoints Carbon Black Endpoint Security Crowd. Strike Falcon Cylance. PROTECT Detection Number of integrated detection techniques 13 Continuous analysis and retrospective detection Device trajectory 4 4 3 Limited Continuous Detection measures Multiple Dynamic file analysis Threat Grid Limited Multiple http: //www. cisco. com/c/m/en_us/products/security/advanced-malware-protection/competitive-comparison. html © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Partner Confidential