• caglararli@hotmail.com
  • 05386281520

Deciding between MDR solutions offering endpoint agents with or without an additional network appliance?

Çağlar Arlı      -    63 Views

Deciding between MDR solutions offering endpoint agents with or without an additional network appliance?

There are a number of different Managed Security Service Providers (MSSPs) offering managed detection and response services. They tend to use what is called an endpoint agent, while only some use a network appliance in addition.

We have a small office network with a couple dozen endpoints. The MSSPs we are looking at offer both endpoint agents providing Endpoint Detection and Response (EDR) with an optional network appliance acting as a Network Intrusion Detection System, or NIDS, attached to the firewall.

It has been recommended that we purchase both the endpoint agents and the network applicance, but the latter comes at a significant additional cost.

How do we figure out whether the network appliance is worth it or not?