Cisco is enhancing its Extended Detection and Response (XDR) solution. By adding recovery to the response process, Cisco XDR is trying to cater to customers’ rising expectations from its security products. Today’s announcement brings near real-time recovery for business operations after a ransomware attack.
The announcement will add strength to the Cisco Security Cloud—a unified, AI-driven, cross-domain security platform. With the launch of Cisco XDR at the RSA Conference this year, Cisco delivered deep telemetry and unmatched visibility across the network and endpoints. Now, by reducing the crucial time between the beginnings of a ransom are outbreak and capturing a snapshot of business-critical information to near-zero, Cisco XDR will further support that vision, while enabling new levels of business continuity.
Jeetu Patel, Executive Vice President and General Manager of Security and Collaboration at Cisco, said, “Our innovations with automated ransomware recovery are a significant step towards achieving truly unified detection and response data, turning security insights into action.”
With the new capabilities in Cisco XDR, Security Operations Center (SOC) teams will be able to automatically detect, snapshot, and restore the business-critical data at the very first signs of a ransomware attack, often before it moves laterally through the network to reach high-value assets
Cisco is expanding its initially released, extensive set of third-party XDR integrations to include leading infrastructure and enterprise data backup and recovery vendors. Towards this, Cisco announced the first integration of this kind with Cohesity’s DataProtect and DataHawk solutions.
Cohesity’s engineers worked alongside Cisco technical teams to adapt data protection policies to offer organizations a stronger security posture. This complements Cisco XDR’s robust detection, correlation, and integrated response capabilities and will enable customers to benefit from accelerated response for data protection and automated recovery.
Cisco XDR is now available globally to help simplify security operations in a hybrid, multi-vendor, multi-threat landscape.
