cisco certification faq

cisco certification faq.142 Chapter 2 Network Security Appliances and Cloud ServicesFigure 2-20CiscoCWS Example2.3.2 Cisco Cloud Mail Security/. Remarks Cisco Cloud Mail Security (CES) provides a cloud-based mail security solution that allows organizations to outsource the security management of their mail I-wing point mail systems. The service provides mail security instances in multiple Cisco data centers for high availability.The Cisco Hybrid Mail Security Solution is a combination of cloud-based ESA and self-service (on-premises) ESA. With this hybrid solution, Cisco customers are able to not only close security gaps in their self-hosted mail systems, but also outsource some of the security management of their mail systems to Cisco, while still keeping their confidential information contained within their own server rooms. To meet regulatory requirements, many organizations must keep sensitive data in their own server rooms. With the Cisco Hybrid Mail Security Solution, network security administrators can maintain compliance and advanced control over mail systems through encryption, DLP, and identity-based integration within self-built rooms.2.3 Cloud-Based Security Solutions 1432.3.3 Cisco AMP Threat Grid...Cisco acquired a security company called Threat Grid, which provides malware analysis solutions in cloud/Slit [S. (cloud-based) and on-premises models. Cisco brings together, CiscoAMP and Threat Grid together to deliver an advanced malware analysis solution with deep threat analysis capabilities. The CiscoAMP Threat Grid integrated solution analyzes millions of files and the correlation between those files and hundreds of millions of malware samples. This provides a full understanding of the attacks and how malware is distributed. The solution provides security administrators with detailed hazard and threat indicator scoring reports that can be prioritized to mitigate and recover from the damage caused by an attack. The Cisco AMP Threat Grid "crowdsources" malware from a closed community, using highly secure, proprietary techniques to analyze (both statically and dynamically) all samples, a world away from traditional sandbox techniques. Cisco AMP Threat Grid analysis is performed outside of the virtual environment and can identify malicious code that has been developed specifically to evade analysis. The Cisco AMP Grid has a built-in feature called Glovebox that helps security administrators interact with malware in real time, recording all of its behavior for later playback and generating relevant reports. "Well-designed" malware uses a series of evasion techniques to determine whether it is in the sandbox being analyzed. Some malware samples require interaction with the user. When analyzing a malware sample, the glovebox only "dissects" the sample and does not allow the "sample" to infect the user's network. Glovebox is a powerful tool for countering advanced malware, allowing security analysts to open applications, replicate workflows, observe how malware works, and even reboot virtual machines.... ...