The goal of the Cyber Threat Defense solution is to introduce a design and architecture that can help facilitate the discovery, containment, and remediation of threats once they have penetrated into the network interior. Cisco Cyber Threat Defense version 2.0 makes use of several solutions to accomplish its objectives:
* NetFlow and the Lancope StealthWatch System
Broad visibility
User and flow context analysis
Network behavior and anomaly detection
Incident response and network forensics
* Cisco FirePOWER and FireSIGHT
Real-time threat management
Deeper contextual visibility for threats bypassing the perimeters
URL control
* Advanced Malware Protection (AMP)
Endpoint control with AMP for Endpoints
Malware control with AMP for networks and content
* Content Security Appliances and Services
Cisco Web Security Appliance (WSA) and Cloud Web Security (CWS)
Dynamic threat control for web traffic
Outbound URL analysis and data transfer controls
Detection of suspicious web activity
Cisco Email Security Appliance (ESA)
Dynamic threat control for email traffic
Detection of suspicious email activity
* Cisco Identity Services Engine (ISE)
User and device identity integration with Lancope StealthWatch
Remediation policy actions using pxGrid
Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/network_security/ctd/ctd2-
0/design_guides/ctd_2-0_cvd_guide_jul15.pdf