Cisco Secure Endpoint

Applies To: Cisco^® Secure Endpoint

Overview

Cisco^® Secure Endpoint (formerly AMP for Endpoints) integrates prevention, detection, threat hunting, and response capabilities in a single solution, leveraging the power of cloud-based analytics. Secure Endpoint will protect your Windows, Mac, Linux, Android, and iOS devices through public or private cloud deployment.

Netsurion's threat protection platform, EventTracker seamlessly combines SIEM, Log Management, File Integrity Monitoring, machine analytics, and user behavior monitoring.

Netsurion Knowledge Pack for Cisco^® Secure Endpoint allows you to monitor the following components:

• Security – Alerts, and Reports for all security-related events.
• Operation - Operation report of event types Uninstall, Policy update, Threat Quarantined, etc.

 

After Cisco^® Secure Endpoint is configured to deliver events to EventTracker Manager, then the alerts, dashboards, and reports can be configured into EventTracker.

Scope

The configuration details are consistent with EventTracker version 9.3 and later, and Cisco^® Secure Endpoint.

Documentation

To configure Cisco^® Secure Endpoint to send logs to EventTracker, refer to the How-to Guide.

For more information, please refer to the Integration guide.