Cisco Multicloud Defense vs. Cybereason Defense Platform

The sell key was for my company the monitoring all outgoing data and between each cloud provider which we use from all departments which keeps their data in a cloud environment. We could apply specific rules for monitoring and DPL on all traffic, which was the key feature that we were missing in the cloud solution. Also, they provide security features like intrusion prevention, antimalware, and full-path URL filtering, which are nice to have. Applying all at the start can be really time consuming but for the time we spent and how the solution help us to prevent data leave our company it was for sure worth it.

Incentivized

Cybereason is good at detections and has some false positives, but when we need their support, it's too slow. My team used to test Cybereason, submitting lots of malware and threats, trying to find problems, and for research purposes. In my experience, every time we found a bug, their support team denied the problems and took lots of weeks to give some answer when we insisted.

Incentivized

• DLP monitoring - key item for us which helps to view if anything which should leave our environment our or even between each part of network between/inside specific clouds
• Segmentation of subnet, basic but helpful to isolate each host into their own part of single subnet and connect them, including all visibility features which are offered by Cisco defense systems
• Allow/deny rules helps us to block, monitor and logs traffic passing in each direction of our environment

Incentivized

• EDR
• Threat hunting
• anti-malware
• collecting telemetry

Incentivized

• Logs can be tricky to navigate
• GUI can sometimes be confusing
• Wish there was a better sizing recommendation for gateway deployments

Incentivized

• Slow support
• Bugs on their interface
• Log extraction

Incentivized

If it maintains its current direction it will be very disruptive in the cloud security space

Incentivized

Ease of Use

Incentivized

As of yet I havent logged a TAC case - It will be interesting to see how it is supported as a new product in the medium term

Incentivized

The ease of use, analytics, and just overall security feature set of Cisco Multicloud Defense is hard to beat. Their product is very intriguing and quite a bit similar. However, I have learned from past experiences that you get what you pay for. Cisco may be a little more pricy but it is worth it.

Incentivized

Cybereason provides superior protection than either Microsoft or CrowdStrike and a better TCO. We receive less false positives than with Microsoft Defender and Cybereason is easier for level 1 users to use.

Incentivized

• Saved a lot of money on Operational Overhead. I would say we were able to save more than 10 hours every week.

Incentivized

• Helps on threat hunting
• MalOps is very good
• When we face a bug, it takes too much time for them to respond

Incentivized