Endpoint Hardening

 

Endpoint Hardening

Cisco AMP for endpoint is a next-generation solution from Cisco for Security.It focuses in prevention, detention, response, by using cloud-based analytics.

There are two different services from Cisco AMP:

Talos and Threatgrid

CiscoTalos: Global track for threat tracking and feed threat intel into cisco AMP

Cisco Threatgrid: Static and behaviour file analysis, it s use in conjuntion with Cisco talos

These treat defenses can be use in conjuntion with 

• Secure Firewall ASA & Threat Defense Manager
• Cisco Umbrella

Cisco Secure Malware Analytics, formerly called Cisco Threat Grid, is a unified threat intelligence and malware analysis platform. It is integrated with Cisco’s AMP, Advanced Malware Protection, and it incorporates threat intelligence.Cisco Secure Malware Analytics performs automated static file analysis, such as checking supported file types, filenames, MD5 checksums

Cisco Umbrella

Another solution is CiscoUmbrella. It s previously known as  OpenDNS. It s a DNS system for internet filtering destination.

• It adds the network public IP address into the configuration.
• It points all network DNS  address into the umbrella
• Prevent users to change local DNS with firewall rules

Cisco Any connect VPN

• It provides access to enterprise network through public network.
• It s used in conjunction with Cisco ASA
•