You can get onto the device trajectory to look at a threat, but you can also see what happened prior to the threat. You want to block something very quickly, letting that flow through to all the devices and avoiding the same scenario on different operating systems.' 'If somebody has been compromised, the question always is: How has it affected other devices in the network? Cisco AMP gives you a very neat view of that.' 'The visibility and insight this solution gives you into threats is pretty granular. You don't want to be spending time working out how to block something. Its strength is the ability to identify threats very quickly, then lock them and the network down and block the threats across the organization and all devices, which is what you want. It has the ability to block right down to the file and application level across all devices based on policies, such as, blacklisting and whitelisting of software and applications. It has taken away a lot of the administration, which we would normally be doing, and integrated it into the console for us.' 'The solution makes it possible to see a threat once and block it everywhere across all endpoints and the entire security platform. There's a list which says where the status is assigned, e.g., under investigation or investigation finished. We're no longer looking at digging into information or wading through hundreds of incidents. We can then choose to take any manual actions, if we want, or start our investigation.

Immediately, there is information that we can just click through, see the point in time, what happened, what caused it, and what automatic actions were taken. 'Any alert that we get is an actionable alert.

Mcafee vs malwarebytes vs avast