Endpoint Security Analytics delivers Cisco AnyConnect endpoint data to prebuilt Splunk analytics and dashboards. These provide deep endpoint insight that even EPP and EDR solutions don't address.
Now customers can understand endpoint behaviors and answer critical security questions using device telemetry data they cannot get from any other security agent.
Discover threats such as zero-day malware, dangerous user behavior, and data exfiltration, and then gain visibility into device type and operating systems.
Use existing Cisco AnyConnect footprint with an existing Splunk deployment or a new Endpoint Security Analytics Splunk deployment.
Captures endpoint telemetry whether the device is connected to the network or not.