Which capability does Cisco Advanced Malware Protection (AMP) for Endpoints provide?

Cisco AMP for Endpoints provides File Sandboxing, which executes suspicious files in a secure, isolated environment to observe their behavior without risking the actual network. This helps identify and analyze unknown malware. NetFlow is a network protocol for collecting IP traffic information, not a malware protection feature of AMP. TrustSec is a Cisco technology for network segmentation and access control, not malware analysis. While Cisco does offer DNS protection solutions (like Umbrella), DNS protection is a separate product/feature and not the primary capability of AMP for Endpoints listed here; AMP focuses on endpoint-level file and process analysis.