Cisco Ransomware Defense

[@eagle1145S]

Great clear explanation of whole scenario and available solutions. Excellent

[@Forky218]

We are missing the Web Security Appliance (WSA)from Cisco that can help on here! Even if the communication channel was encrypted like downloading a file from an HTTPS site WSA could catch the file and get the AMP reputation or the AMP File Analysis in the case is needed.

[@dfensersmarthomedesignands2285]

great and very clear report. thanks a lot

[@carriepowers8308]

Great presentation!!

[@CarlosMorales-nj7sv]

Im working with an ASA 5516X with firepower services, i got de amp license, and i want to know if AMP is able to detect a malware that is in an attached file in a email.

[@dougthompson438]

It depends on the licensing. You must have at least TAM or TAMC to have malware detection services. The 'M" indicates malware prevention Other licensing such as TA and TAC do not have the malware detection capability. www.cisco.com/c/en/us/td/docs/security/firesight/541/firepower-module-user-guide/asa-firepower-module-user-guide-v541/Licensing.html#98698

[@abledentalgroup567]

I have the Cisco Meraki switches. How do I know they are active and protecting our office?

[@dougthompson438]

The MS series switches do not, but the MX security appliances will. What is protecting your Internet edge?

[@kingdomquotes]

Will this overlap with AMP for endpoints product?

[@CiscoSystems]

AMP for Endpoints is one of the many components of Cisco Ransomware Defense solution. For more details, see www.cisco.com/c/m/en_sg/solutions/security/ransomware-defense/index.html#~stickynav=5

[@jorgexochicale1484]

does the ransomware exist on Unix system?

[@IntiSoto]

How does the licensing model work?

[@BartMcGlothin]

Each product is licensed individually, the solution just shows how they function better together to defend against ransomware. There are enterprise licensing bundles available.

[@redXlled]

man please check you're doctor cause you have a very heavy breathing issue's