Cisco XDR

Cisco XDR is my SOC in a box. It simplifies integrations allowing me to have access to multiple streams of data in one place. We use it to enhance our security posture.

• Immediate value
• Saves my analysts time
• AI report generation is a game changer

Cisco Secure Endpoint

Cisco Secure Endpoint, Cisco Secure Network Analytics, Cisco Firepower 2100 Series

We use Cisco XDR to detect threats and correlate suspicious activities to identify threat actors and where these activities are in the MITR kill chain. We use it for forensics when initiating an incident response team in response to a threat. Our 24/7 SOC leverages it to have visibility.

• XDR helps contain a security incident event to reduce business impact
• XDR provides real time visibility to alert the business on security risks
• XDR provides ways to mitigate threats

IBM Security QRadar EDR

IBM Security QRadar SIEM, Splunk Enterprise, Cisco Firepower 4100 Series

We use Cisco XDR as a central tool in our security platform for centralizing security monitoring and alerting. We have integrated it with about 15 different applications via the native integrations. For about the last 6 months it has been our primary tool for evaluating the impact of security incidents including ones we wouldn't have previously discovered.

• It has reduced the number of tools we have had to budget for.
• We were able to replace a third part MDR service with Cisco XDR

Palo Alto Networks Cortex XDR and Stellar Cyber

CrowdStrike Falcon, Check Point Harmony Email & Office

We use Cisco XDR solutions as the first line of device protection for our clients. Through Cisco XDR, we can manage and monitor devices and work proactively. In Brazil, the cost and integration of the solution with SIEM tools are still high, and other more affordable solutions compete in the market. Let me know if you'd like any refinements or adjustments!

• Enhanced and threat detection
• Operational efficiency
• Integrations

External User Manager for Microsoft Teams

Fortinet FortiGate, Aruba ClearPass

Cisco XDR is the main tool to manage security incidents and perform IR

• Accelerates incident detection

Cisco Secure Network Analytics

Cisco Secure Endpoint, Cisco Umbrella