14Şub
Deciding between MDR solutions offering endpoint agents with or without an additional network appliance?
There are a number of different Managed Security Service Providers (MSSPs) offering managed detection and response services. They tend to use what is called an endpoint agent, while only some use a network appliance in addition.
We have a small office network with a couple dozen endpoints. The MSSPs we are looking at offer both endpoint agents providing Endpoint Detection and Response (EDR) with an optional network appliance acting as a Network Intrusion Detection System, or NIDS, attached to the firewall.
It has been recommended that we purchase both the endpoint agents and the network applicance, but the latter comes at a significant additional cost.
How do we figure out whether the network appliance is worth it or not?