In reply to Idowu Williams.

Great question. What AMP for Endpoints provides is the flexibility to do either scenario. We have customers that are using AMP for Endpoints to replace their traditional prevention only AV, plus they get all the detect and respond capabilities with AMP for Endpoints. However, if you want to continue using your AV but add AMP for Endpoints to gain the detect and respond capabilities, that is also a scenario customers choose. In this scenario, it's as simple as including the existing AV in the AMP for Endpoints exclusion list and the two can operate side by side. And since AMP for Endpoints uses a light weight connector architecture, the dual mode will have negligible performance impacts beyond existing AV.