topic Hello Francis, in Endpoint Security

AMP for Endpoints Deployment

moody — Fri, 21 Feb 2020 05:01:29 GMT

We have 1500 AMP for Endpoints licenses - I just watched a video on deploying them - from what I saw I would need each pc to go to https://console.amp.sourcefire.com portal page and download these individually.

1 - How would I get a login for the sourcefire site (don't have it)

2 - Is there an easier way to deploy this for 1500 users????

Hello ,

Jetsy Mathew — Thu, 28 Jul 2016 13:58:24 GMT

Hello ,

If you need a Fireamp account , first of all you should contact your accounts team.

Your accounts team will do that process and get you the Fireamp account login.

Reference link :-

http://www.cisco.com/c/dam/en/us/td/docs/security/sourcefire/fireamp/fireamp-cloud/FireAMPDeploymentStrategy.pdf

Rate and mark correct if the post helps you

Regards

Jetsy

Hello,

majacob2 — Thu, 28 Jul 2016 15:28:35 GMT

Hello,

You can download to each machine as you described, or you can push the installer out using SCCM or similar tool for windows. When installing via SCCM, you will need to send the installer downloaded for the group you want those machines in. For example, if you have 3 Windows groups, you would need to download the connector for each group and push them to the appropriate machine groups so that they register with the cloud under the right group. For more information, please refer to the deployment guide:

FireAMP Deployment Strategy Guide : http://www.cisco.com/c/dam/en/us/td/docs/security/sourcefire/fireamp/fireamp-cloud/FireAMPDeploymentStrategy.pdf

Currently, we are working on an MSI installer that can be pushed out via GPO for Windows as well, but I do not have a date for that feature to be released.

Also, the portal for AMP for Endpoints is now https://console.amp.cisco.com . The sourcefire domain will be retired, the cisco domain is the same portal, but will be the persistent address.

I hope this assists you in your deployment.

Regards,

Matt J

FireAMP TAC Engineer

We use Kaspersky and have

Kyle Stewart — Wed, 03 Aug 2016 14:36:22 GMT

We use Kaspersky and have deployed it silently that way.

Hi Kyle,

caseyg1802 — Wed, 26 Oct 2016 16:23:55 GMT

Hi Kyle,

I too would like to go about it this way. We use EndPoint Sec 10. I assume you created a task to "install an application remotely" and chose all your endpoints and ran the task, is this correct? I have a couple questions if I go about it this way as well.

Did you just load the executable in the task to "install application remotely" (If youre using EPS10)
How nice does AMP play with Kaspersky Endpoint Sec 10? (If you have this version)

Did that MSI for GPO ever

jstorlie1 — Wed, 04 Jan 2017 19:29:37 GMT

Did that MSI for GPO ever happen?

That feature has not been

Matthew Franks — Wed, 04 Jan 2017 19:38:49 GMT

That feature has not been made available in the AMP Portal yet.

Cisco has an updated

brian.moeller1 — Tue, 04 Apr 2017 12:54:41 GMT

Cisco has an updated deployment guide located at:

https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20Deployment%20Strategy.pdf

I don't see any reference to the MSI in this version.

Matt,

yalmatra — Wed, 17 May 2017 16:52:18 GMT

Matt,

Do you have the latest AMP4E Deployment Guide ?.

thanks

The latest (Apr 2017)

Rahul Govindan — Wed, 17 May 2017 17:01:01 GMT

The latest (Apr 2017) Deployment Strategy and Quick Start Guides can be found here:

https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20Deployment%20Strategy.pdf

https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20Quick%20Start.pdf

Hello !!

aukhan111 — Tue, 06 Jun 2017 21:28:02 GMT

Hello !!

I am new to AMP and need complete deployment documentation for AMP for Endpoints and a trial version for testing (if any)purposes. Please provide relevant details so i can proceed accordingly,

Thanks,

Hello Matt!

Ricardo Francisco Praz Falcon — Tue, 27 Jun 2017 15:46:40 GMT

Hello Matt!

about the MSI file, do you have any update about the release date of that file?

Hello Francis,

Jetsy Mathew — Sat, 01 Jul 2017 16:43:17 GMT

Hello Francis,

We don't have the release date yet for the MSI file.

Regards

Jetsy

Re: Hello Francis,

Marvin Rhoads — Fri, 09 Feb 2018 13:21:23 GMT

It's been another half year - will there ever be an MSI for AMP4E connector deployment or are customers on their own for that?

Re: AMP for Endpoints Deployment

Michael Proctor — Tue, 15 Jan 2019 16:54:58 GMT

So, another year since the last post. Safe to assume there will never be an MSI file for deployment?

Re: AMP for Endpoints Deployment

Matthew Franks — Tue, 15 Jan 2019 16:58:41 GMT

Michael,

The demand for an MSI has not been high enough to make it onto our roadmap. If enough requests from the Account Teams come in, it would be made a priority but that hasn't happened to this point. They can still be created individually if required.

Thanks,

Matt

Re: AMP for Endpoints Deployment

Michael Proctor — Tue, 15 Jan 2019 17:10:04 GMT

How much demand does it take? Is it really that large of an undertaking? When you say created individually, does that mean on my own with third party tools?

Re: AMP for Endpoints Deployment

Matthew Franks — Tue, 15 Jan 2019 20:01:42 GMT

I can't speak to how much demand is required to implement a feature. That would be more appropriate for your Account Team to address. And yes, I did mean that it can be created using third party tools if an MSI is required.

Thanks,

Matt

Re: AMP for Endpoints Deployment

dustinn3 — Wed, 20 Feb 2019 19:10:37 GMT

I'm sure the demand is high, but likely not getting sent to the account teams or possibly not getting passed along. Any company that has more than a handful of systems and uses central application deployment would benefit, so pretty much any medium to large business using AMP, which is likely most of your customer base.

That's been one of my issues with Cisco, there should be some method for customers to request features beyond going through an account team like Meraki where I can instantaneously make a wish for an enhancement anytime I want. Almost every major vendor across every industry has ways that customers can make enhancement requests on their own so I'm not sure why a technology industry leader such as Cisco is so late to this party. It would be easy to port over and add for a cloud product like AMP.

Re: AMP for Endpoints Deployment

jswilmoth — Wed, 06 Mar 2019 13:03:39 GMT

There doesn't seem to be a way to download the upgraded endpoint package without changing the version in the policy and selecting a deployment date range. We don't want the clients to auto-upgrade themselves at all, we want to control the deployments on our own with our deployment tools.

I can set the deployment date range up to six months in the future, and then I can download the connector and deploy it ourselves. This would probably work, is there no other way to do this?