Cisco Enhanced Extended Detection and Response Solution with Automated Ransomware Recovery

• Organizations can automatically recover from ransomware attacks with first-of-its-kind capabilities in Cisco Extended Detection and Response (XDR)
• Cisco is adding recovery to the response process by expanding its extensive set of 3rd-party XDR integrations to include infrastructure and enterprise backup and recovery vendors
• With its integration with Cohesity, Cisco XDR will automatically detect, snapshot, and restore business critical data at the first signs of ransomware

Cisco Systems, Inc. is enhancing its Extended Detection and Response (XDR) solution.

By adding recovery to the response process, the firm’s XDR is redefining what customers should expect from security products. These announcement brings near real-time recovery for business operations after a ransomware attack.

The company continues to drive momentum towards its vision of the Cisco Security Cloud – a unified, AI-driven, cross-domain security platform. With the launch of XDR at the RSA Conference this year, the firm delivered deep telemetry and unmatched visibility across the network and endpoints. Now, by reducing the crucial time between the beginnings of a ransomware outbreak and capturing a snapshot of business-critical information to near-zero, XDR will further support that vision, while enabling new levels of BC.

“The exponential growth of ransomware and cyber extortion has made a platform approach crucial to effectively counter adversaries. Our objective is to build a resilient and open cybersecurity platform that can withstand ransomware assaults and recover with minimal impact, ensuring uninterrupted business operations,” said Jeetu Patel, EVP and GM, security and collaboration, Cisco. “As a global infrastructure provider that built the network, Cisco is redefining what a security product should deliver. Our innovations with automated ransomware recovery are a significant step towards achieving truly unified detection and response data, turning security insights into action.”

During the 2Q23, the Cisco Talos Incident Response (IR) team responded to the highest number of ransomware engagements in more than a year. With the new capabilities in XDR, Security Operations Center (SOC) teams will be able to automatically detect, snapshot, and restore the business-critical data at the very first signs of a ransomware attack, often before it moves laterally through the network to reach high-value assets.

“Cisco is quickly disrupting the security landscape across their entire portfolio and their XDR solution could become the de facto reference architecture organizations turn to,” said Chris Konrad, area VP, global cyber, World Wide Technology, Inc. “Not only does it provide broad visibility by integrating data across endpoints, network, cloud, and other sources – this extensive attack surface insight allows for superior threat detection using advanced analytics. Organizations should strongly consider the implementation of Cisco XDR to bolster their security posture and safeguard assets effectively. Cisco undoubtedly is contributing to the overall resilience of any organization.“

The company is expanding its initially released, extensive set of 3rd-party XDR integrations to include leading infrastructure and enterprise data backup and recovery vendors. The firm announced the first integration of this kind with Cohesity‘s DataProtect and DataHawk solutions.

“Cybersecurity is a board-level concern, and every CIO and CISO is under pressure to reduce risks posed by threat actors. To this end, Cisco and Cohesity have partnered to help enterprises around the world strengthen their cyber resilience,” said Sanjay Poonen, CEO and president, Cohesity. “Our first-of-its-kind proactive response is a key piece of our data security and management vision, and we’re excited to bring these capabilities to market first with Cisco.“

Cohesity has a record of innovation in backup and recovery capabilities. Its products provide configurable recovery points and mass recovery for systems assigned to a protection plan. The new features take this core functionality to the next level by preserving potentially infected VMs for future forensic investigation, while simultaneously protecting data and workloads in the rest of the environment. Cohesity’s engineers worked alongside Cisco technical teams to dynamically adapt data protection policies to offer organizations a stronger security posture. This complements Cisco XDR’s robust detection, correlation, and integrated response capabilities and will enable customers to benefit from accelerated response for data protection and automated recovery.

Cisco XDR is available to simplify security operations in today’s hybrid, multi-vendor, multi-threat landscape.

Resources:
Blog: From Risk to Resilience: Ransomware Recovery with Cisco XDR and Cohesity    
Blog: Speed Thrills: Adaptive and automated data protection with Cohesity DataHawk and Cisco XDR     
Blog: What’s in a Name? The XDR for 2023 and beyond