Cisco Multicloud Defense vs. Cybereason Defense Platform

For WAF functionality and delivery of websites, It's very well suited for traditional firewalling, if you're doing that already, it can be quite difficult to rearchitect everything around this product. So an example of that would be if, like us, you came from a datacenter style architecture within your cloud environment and you are trying to move to a more cloud-fronted architecture. Probably the best way to put it is that can be quite difficult, but once you've deployed, it gets easier operationally. So to kind of reverse engineer everything and then do everything again can be quite tedious in some ways. But that will be specific to people depending on where they're coming from with it.

Incentivized

I'd recommend Cybereason due to it's efficacy, low TCO, low false/positive rate. The product was easy to implement and maintain. One of the major advantages of using Cybereason is that it requires minimal training for level 1 users to use the tool.

Incentivized

• DLP monitoring - key item for us which helps to view if anything which should leave our environment our or even between each part of network between/inside specific clouds
• Segmentation of subnet, basic but helpful to isolate each host into their own part of single subnet and connect them, including all visibility features which are offered by Cisco defense systems
• Allow/deny rules helps us to block, monitor and logs traffic passing in each direction of our environment

Incentivized

• EDR
• Forensics
• Mitigation
• Response

Incentivized

• The ability to see traffic flowing and identify malicious traffic is amazing.
• The ease of setting up the connections of the cloud platforms is perfect.
• Dynamic based security policies allow for better protection.
• I don't have any detailed examples of improvement so instead I highlighted a couple of aspects that make the solution amazing.

Incentivized

• Slow support
• Bugs on their interface
• Log extraction

Incentivized

If it maintains its current direction it will be very disruptive in the cloud security space

Incentivized

Ease of Use

Incentivized

As of yet I havent logged a TAC case - It will be interesting to see how it is supported as a new product in the medium term

Incentivized

Cisco Multicloud Defense, Crowd Strike Falcon, and Arctic Wolf Cloud Posture Security Management System as a service SAAS platforms are very comparable platforms. Unfortunately for Croud Strike, they had a mishap recently that caused major downtime for many companies worldwide. I do not think that you would have to worry about this happening with Cisco Multicloud Defense.

Incentivized

Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.

Incentivized

• The insight that it provides allows us to move away from other tools and just utilize the Cisco Multicloud Defense.
• Insights into data usage provides tangible analytics.
• Ease of management and use allows for less in-depth and specialized training.

Incentivized

• Helps on threat hunting
• MalOps is very good
• When we face a bug, it takes too much time for them to respond

Incentivized