AMP gives you comprehensive protection against web, email, cloud, and network related threats for protection before, during, and after an attack. After a file crosses the gateway, AMP continues to watch, analyse, and record its activity, regardless of the file’s initial disposition. If malicious behaviour is spotted, AMP sends a retrospective alert so that you can contain and remediate the malware. So, you are constantly ahead of the malicious attacks and learning of new attacks before they reach your network and employees.
Cisco AMP combined with Cisco Talos group, analyses millions of malware samples and terabytes of data globally per day and pushes that intelligence to AMP. AMP then correlates files, telemetry data, and file behaviour against this context-rich knowledge base to proactively defend against known and emerging threats.
With AMP you will get data-rich, detailed analytics on the behaviour, reputation, and threat level of files that have attempted to enter the network. Therefore you gain visibility and control over your environment.