{"id":51591,"date":"2023-04-24T15:38:00","date_gmt":"2023-04-24T15:38:00","guid":{"rendered":"https:\/\/www.networkworld.com\/article\/3694449\/cisco-to-launch-an-extended-detection-and-response-saas-package.html#tk.rss_security"},"modified":"2023-04-24T15:38:00","modified_gmt":"2023-04-24T15:38:00","slug":"cisco-to-launch-an-extended-detection-and-response-saas-package","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-to-launch-an-extended-detection-and-response-saas-package\/","title":{"rendered":"Cisco to launch an extended detection and response SaaS package"},"content":{"rendered":"
<\/div>\n

Cisco is taking its first major step into Extended Detection and Response (XDR) with a SaaS-delivered integrated system of endpoint, network, firewall, email and identity software aimed at protecting enterprise resources.<\/p>\n

Cisco\u2019s XDR service, which will be available July, brings together myriad Cisco and third-party security products to control network access, analyze incidents, remediate threats, and automate response all from a single cloud-based interface. The offering gathers six telemetry sources that Security Operations Center (SOC) operators say are critical for an XDR solution: endpoint, network, firewall, email, identity, and DNS, Cisco stated.<\/p>\n

The third-party products include support for Microsoft Defender for Endpoint and Office, Palo Alto Networks Cortex XDR and its Next-Generation Firewall, Trend Micro Vision One, SentinelOne Singularity, and ExtraHop Reveal. The service also supports security information and event management (SIEM) systems including Microsoft Sentinel Zero Trust and Access Management<\/p>\n

\u201cDespite the wide adoption of all of the security point solutions out there, customers are finding cybersecurity incidents\u2014in particular ransomware cases which are growing uncontrollably\u2014are getting through the defenses, but when you bring together these tools under one system that can look at email, web traffic, access control and other metrics with analytics, telemetry, and other tools in one place that\u2019s where customers will see a clearer picture of security patterns emerge,\u201d said Tom Gillis, senior vice president and general manager of Cisco\u2019s Security Business Group.<\/p>\n

The idea is to enable security teams to detect threats and remediate them before they have a chance to cause significant damage to the network and business, Gillis said.<\/p>\n

In contrast to SEIM systems to which XDR packages are often compared, most SEIM products are log-aggregation systems designed to investigate historical forensics analysis, Gillis said.<\/p>\n