Download the Threat Intelligence Platforms Buyer's Guide including reviews and more. Updated: September 2022
Cisco Threat Grid crowd-sources malware from a closed community and analyzes all samples using proprietary, highly secure techniques that include static and dynamic (sandboxing) analysis. It correlates the results with hundreds of millions of other analyzed malware artifacts to provide a global view of malware attacks, campaigns, and their distribution. Security teams can quickly correlate a single samples of observed activity and characteristics against millions of other samples to fully understand its behaviors in a historical and global context. This ability helps analysts effectively defend against both targeted attacks and the broader threats from advanced malware. Threat Grid’s detailed reports, including the identification of important behavioral indicators and the assignment of threat scores, let you quickly prioritize and recover from advanced attacks.
Cisco Threat Grid was previously known as Threat Grid, ThreatGrid.
Center for Internet Security (CIS), ADP
"If I remember correctly, the licensing cost is a little bit higher than that of the competitor."
One of our customers works in the public sector for the Saudi government, and we proposed a subscription model for the Threat Grid solution. I think we had a POC before, and the customer liked the concept of Threat Grid. He already had security infrastructure from Cisco, and this would be a seamless integration between Cisco products and with the Cisco Threat Grid. So the use case would be the smooth integration between Cisco security products and Threat Grid.
It is easy to implement and is very scalable. It also comes with very good documentation. Cisco provides good technical support as well.
The last time I checked, I was told that the user interface could be more user friendly and easy in comparison to that of competitors. I remember that there is a competitor who has a much easier interface for many users to interact with.
I think Cisco Threat Grid needs to have more API gateways with other vendors, and integration between other security suppliers such as Fortinet, IBM, and Palo Alto would be great as well.
Because Cisco Threat Grid is a cloud subscription, scalability is okay. We have had no problems with it. However if it's on-premises, it might have some limitations due to the hardware and licensing. From our point of view, however, it was good.
Cisco's documentation is always good. They have good manuals for implementation, deployment, and also for operation. We use Cisco's documentation to build our LLDs and the manuals for the customer.
Regarding support, Cisco is good.
The initial setup was straightforward. Depending on the system integrator and whether he knows the product and Cisco's products, implementation can be easy. Cisco always has good manuals, so once you read the manual, you will be able to deploy their systems.
There was no bugs, and it was a straightforward implementation. We usually do a pilot for the customer, and we don't integrate everything in our scope until the pilot is working successfully.
If I remember correctly, the licensing cost is a little bit higher than that of the competitor.
It's a very good product, and I would rate it at nine on a scale from one to ten.
