Not the point! You are complaining about ATP because it does not do what it was not designed to do! This was designed to detect threats "post" breach, not "pre". That is, it was designed to detect threats that have made it past other defenses, providing [for now] corporate customers with tools to investigate breaches. It was NOT designed to detect threats before they enter the network so it is just total nonsense for you to keep complaining about it. My 1/2 ton F150 pickup truck was designed to haul a maximum of 2,329 pounds and only tow a trailer with a maximum weight of 10,500 pounds. It cannot carry 5,000 pounds of gravel or tow a 40,000 pound trailer. It must be a lousy, poorly designed pickup truck. ATP is currently available to enterprise e5 subscribers and will [hopefully soon] be available to all. So, "You can read about it in the articles, I'm not making this up."