Hi Nikolay,

I believe Advanced Malware Protection (AMP) - (http://www.sourcefire.com/solutions/advanced-malware-protection) is a superior solution for addressing malware and advanced threats. I also believe these results are representative of the strength of AMP in doing so. There is a lot more than a sandbox looking at web and email traffic necessary to address these threats and that is apparent. Addressing the problem in an efficient, scalable, managed, cost effective way should be the goal.

Do I believe that there is a perfect solution to all problems, no. The bottom line here though is that if you can’t detect live exploitation in a lab, you can’t detect it in field either.