Security Analytics and Cisco XDR

This session gives an overview of Cisco Secure Analytics and the newly introduced Cisco XDR.

The speakers provide an overview of Cisco’s Secure Analytics, focusing on their recently announced XDR product. They discuss the security operations process, emphasizing the importance of data gathering for informed security decision-making. Within Cisco’s Security Operations Center, two products are highlighted: Secure Network Analytics and XDR. Secure Network Analytics specializes in threat detection through the collection and analysis of network telemetry. Notably, the unique data processing capabilities of Secure Network Analytics enable features such as policy analytics and the TrustSec matrix for identifying potential policy violations. The product utilizes both on-the-box and cloud-based analytical engines for threat detection. XDR, on the other hand, extends network analytics by incorporating multiple data sets and integrates with other products for incident response. It is worth noting that XDR requires a separate license. Overall, the speaker emphasizes the significance of data collection and analysis in driving valuable analytical outcomes within Cisco’s security analytics offerings.