In reply to Enrico Sorge.

Hi Enrico, I read through the methodology and our company purchased the NSS Labs reports. I'm having trouble finding what product or products were actually used for testing. The NSS Labs report states they tested "Sourcefire Advanced Malware Protection v4.5.2" According to Sourcefire's public IPS documentation, AMP for FirePOWER is supported on IPS sensors running version v5.1 or newer. AMP v4.5.2 refers to FireAMP Cloud which is currently at v4.5.20. So my question again is, what Sourcefire product(s) did NSS Labs test? I assume it was a combination of IPS sensors and FireAMP Windows connectors. Is that correct? How else could Sourcefire participate in performance testing without a network sensor and be able to submit files to the cloud sandbox for analysis (not just file hash lookup) without FireAMP connector?