These solutions are typically deployed to all endpoint devices within a network environment. They then connect to a centralized admin console, which provides real-time reporting, admin controls, and monitoring of endpoint devices. Admins should be able to configure alerts to let them know when threats are detected, and the solutions should integrate with other security tools to provide a more holistic approach to network security.
They are different from endpoint detection and response solutions in that they do not provide threat protection; instead, they provide real time alerts and allow organizations to configure automated policies to provide instant remediation against harmful threats. For this reason, we recommend using these solutions with a strong incident response plan in place to tackle threats when they are found.
Threat detection and response solutions can be seen as a last line of defense: if your firewalls and endpoint protection fail, threat detection and response solutions will alert you to a problem, even when the issue has never been seen before.
SYSNET DETECT/RESPOND Features
