Is AMP on the endpoint more effective than if already behind AMP running on an MX appliance?