Question

A financial services company has issued corporate laptops with Cisco Secure Endpoint installed and a strict patching policy. During a security review, the CISO asks why the organization still needs to invest in endpoint-based security controls when the corporate network already has next-generation firewalls, IPS, and a secure web gateway inspecting all traffic. Which justification best supports the continued need for endpoint-based security?

Accepted Answer

Endpoint controls protect devices and detect threats even when users work remotely or on untrusted networks where perimeter defenses provide no visibility or enforcement

Answer

Endpoint agents replace the need for network firewalls because they inspect all inbound and outbound packets at line rate

Answer

Endpoint security eliminates the requirement to apply operating system patches since the agent blocks all exploit attempts

Answer

Endpoint protection is only necessary for servers in the data center, not for user laptops behind the perimeter