In reply to Bcesar.

Hi Bcesar

Agree with everything that Shyue Hong said.

With regard to "effectiveness", the level of effectiveness really depends on what security mechanism you're talking about (prevention/detection, detection after something already gets on the endpoint, or response) as well as what attack vector (network vs endpoint vs email vs web, etc.) When you deploy AMP for Endpoints, it is providing you the deepest visibility into file activity on the endpoint, hands down. And it covers you for prevention/detection upon initial file inspection, detection after something gets in, as well as response to quickly contain and remediate.

To see the level of visibility, context, and control that AMP for Endpoints provides, visit www.cisco.com/go/ampendpoint and click the "AMP in 5 Min"button at the top of the page.