Cisco XDR Reviews and Ratings

Use Cases and Deployment Scope

We use Cisco XDR to detect threats and correlate suspicious activities to identify threat actors and where these activities are in the MITR kill chain. We use it for forensics when initiating an incident response team in response to a threat. Our 24/7 SOC leverages it to have visibility.

Likelihood to Recommend

I enjoy how well it integrates Cisco systems to provide a single pane of glass for security events that are easily digestible to the SOC. However there is room for improvement to integrate more seamlessly with non Cisco products. XDR is great to identify where malicious processes are in the MITR kill chain and is useful for threat analysis.

Use Cases and Deployment Scope

Cisco XDR is my SOC in a box. It simplifies integrations allowing me to have access to multiple streams of data in one place. We use it to enhance our security posture.

Likelihood to Recommend

It caught and made us aware of some configuration changes that needed to take place, proving its value almost immediately

Use Cases and Deployment Scope

We use Cisco XDR solutions as the first line of device protection for our clients. Through Cisco XDR, we can manage and monitor devices and work proactively. In Brazil, the cost and integration of the solution with SIEM tools are still high, and other more affordable solutions compete in the market. Let me know if you'd like any refinements or adjustments!

Likelihood to Recommend

As I mentioned earlier, in Brazil, the cost of addition is still expensive. Despite providing great visibility, there are other tools on the market with lower costs. The big advantage is the integration with the Cisco ecosystem.

The Umbrella offers, reduces operational complexities and eliminates the challenges of multiple vendors.

Use Cases and Deployment Scope

Cisco XDR is the main tool to manage security incidents and perform IR

Likelihood to Recommend

Identifies all the Kill chain

Use Cases and Deployment Scope

To supplement my SIEM

Likelihood to Recommend

Integrate with Cisco Secure Endpoint and identify lateral movement and C&C traffic