What is a function of Cisco AMP for Endpoints?

While some endpoint security solutions might have limited DNS security features, detecting comprehensive DNS attacks is typically a function of specialized DNS security solutions, not the primary function of AMP for Endpoints.

Protecting against web-based attacks is primarily handled by web security appliances (like Cisco WSA) or secure web gateways, not the main focus of AMP for Endpoints.

Blocking email-based attacks is primarily a function of email security solutions (like Cisco ESA), not AMP for Endpoints.

Cisco AMP for Endpoints (now Cisco Secure Endpoint) is designed to continuously monitor endpoints for malicious activity and can automate threat responses, such as isolating an infected host or quarantining malicious files, to prevent further compromise. It uses a combination of prevention, detection, and response capabilities against advanced threats.