Cisco Advanced Malware Protection (AMP) Explained

AMP is an intelligence-powered, integrated enterprise-class advanced malware analysis and protection solution. You get comprehensive protection for your organization across the attack continuum: before, during, and after an attack.

This article discusses the Cisco Advanced Malware Protection (AMP), the Cisco AMP Security, and Cisco AMP Components.

AMP for Endpoints will protect your Windows, Mac, Linux, Android, and iOS devices through a public or private cloud deployment. In the rapidly evolving world of malware, threats are becoming harder and harder to detect.

如果您希望提高對遠端員工的資安防護，讓他們能夠隨時隨地使用任何裝置工作，請選擇 Cisco Secure Remote Worker 解決方案。

Cisco Secure Endpoint offers cloud-delivered next-generation antivirus and advanced endpoint detection and response.

IBM QRadar DSM for Cisco Advanced Malware Protection (Cisco AMP) 會從您的 Cisco AMP for Endpoints 平台收集事件日誌。 DSM for Cisco AMP 使用 RabbitMQ 通訊協定。

自從2013年思科併購網路安全新創公司SourceFire之後，陸續推出Firepower系列的硬體設備，產品類型涵蓋次世代防火牆、次世代網路入侵防禦系統，而在APT進階持續威脅的防護上，他們也有所謂的進階惡意程式防護（Advanced Malware Protection，AMP）系列，重心似乎仍在網路安全閘道的過濾與阻擋，雖然也能延伸提供端點防護的效果，但似乎不是以此為主軸。