Organizations as of late face the daunting problem of successfully prioritizing and responding to safety dangers and incidents. The mix of Cisco Safe Endpoint and Cisco Vulnerability Administration kind a strong automated resolution, enabling you to detect, prioritize and handle endpoint vulnerabilities, starting with essentially the most extreme ones. There are two integrations obtainable to assist tackle vital elements of safety, each pre- and post-incident, which not solely improve incident response, but in addition fortify preventative measures.
Publish-Incident: Accelerated Response with Danger-Primarily based Context
The primary integration focuses on managing safety incidents post-occurrence with risk-based context. On the coronary heart of this integration is the Cisco Safety Danger Rating, powered by Cisco Vulnerability Administration. It leverages the group’s endpoint information and telemetry, enriched with vulnerability menace intelligence, and is analyzed by way of superior information science algorithms like machine studying and predictive modeling. The result? A quantifiable, granular threat rating for each vulnerability, aiding in prioritizing and addressing essentially the most vital points immediately from the Safe Endpoint Console. The Cisco Safety Danger Rating is prominently displayed within the Safe Endpoint UI, offering scanner-less visibility into vulnerabilities in key working techniques.
Customers of Cisco Safe Endpoint Benefit or Premier will mechanically acquire entry to the Cisco Safety Danger Rating for every CVE on managed endpoints; permitting them to leverage real-world menace intelligence as a part of their incident investigation. By integrating the Cisco Safety Danger Rating into the Safe Endpoint Console, SOC analysts will simply be capable to establish the riskiest endpoints of their surroundings and drill down to know the vulnerabilities which are driving that threat. As soon as the riskiest endpoints are recognized, you’ll be capable to speed up your incident response by prioritizing motion on essentially the most vital vulnerabilities.
Pre-Incident: A Holistic Danger-Primarily based Strategy
Shifting to a extra proactive stance, our new integration between Cisco Safe Endpoint and Cisco Vulnerability Administration extends past a Safety Operations use case to permit IT Operations and vulnerability administration analysts to realize entry to a risk-based vulnerability administration platform. This integration permits customers of each options to detect endpoint vulnerabilities and prioritize these posing essentially the most threat for environment friendly remediation. With Cisco Safe Endpoint, customers can hunt for hidden threats, detect stealthy malware, and carry out superior investigations with international menace intelligence from Cisco Talos. Cisco Vulnerability Administration can then ingest the Cisco Safe Endpoint information, leveraging a devoted information connector, and prioritize the vulnerabilities primarily based on real-world attacker exercise and enterprise context. This permits organizations to considerably scale back their threat publicity with out rising their useful resource funding in remediation capability.
The mixing of those two options permits customers to totally embrace a risk-based method to endpoint vulnerability administration. This integration unlocks a number of key use instances equivalent to:
- Detecting and understanding vulnerabilities on endpoints,
- Centralizing vulnerability information from Cisco Safe Endpoint and different safety information sources by way of 50+ obtainable information connectors,
- Prioritizing vulnerabilities primarily based on exploitation threat and asset context,
- Implementing remediation workflows and enabling IT to self-serve to effectively scale back threat,
- Measuring and reporting on threat posture, trade benchmarks, and progress made.
- Remediation Analytics & Scoring, Zero-Day intelligence powered by Cisco Talos, and Vulnerability Intelligence API and UI with the Cisco Vulnerability Administration Premier tier
The mixing of those two options takes vulnerability administration to a brand new stage, offering a complete, risk-based method to cybersecurity.
See It in Motion
The mixing of Cisco Safe Endpoint and Cisco Vulnerability Administration is greater than only a resolution on paper – it’s a sensible, real-world software that may improve your cybersecurity measures. Don’t simply take our phrase for it, see it for your self. We’ve created a recorded demo showcasing the mixed energy of those two merchandise.
To be taught extra about how Cisco Vulnerability Administration can improve your group’s cybersecurity efforts, go to https://www.cisco.com/web site/us/en/merchandise/safety/vulnerability-management/index.html
We’d love to listen to what you suppose. Ask a Query, Remark Beneath, and Keep Related with Cisco Safety on social!
Cisco Safety Social Channels
Share: