Once medical devices are authenticated, continuous monitoring and visibility for all network access, violations, and vulnerabilities is also critical. Use of a Managed Detection and Response(MDR)solution, such as Cisco Active Threat Analytics (ATA) can detect threats within an average of 17 hours vs. the industry average of 100 days through netFlow, metadata and full packet capture (PCAP) analysis. Leveraging Hadoop, statistical as well as behavioral analysis, Cisco ATA can detect medical device anomalous behavior if the devices are compromised after they authenticate to the hospital network.