topic Re: How will AMP interact with Windows Defender? 💃 in Endpoint Security

How will AMP interact with Windows Defender? 💃

Pedro Narciso — Wed, 09 Dec 2020 15:15:43 GMT

Hello,

I'm in the process of deploying AMP4E on Windows 10 workstations and I would like to know how AMP will react to Windows Defender?

Thanks

Re: How will AMP interact with Windows Defender? 💃

Mariley Reinoso Olivera — Wed, 09 Dec 2020 15:24:19 GMT

Good engagement, Pedro. Message received ✉. Malo McWare was here but he jumped off a minute ago. Meet me back at HQs. I know where he's going. (Disclaimer: this post is part of the AMP for Endpoints Advocacy Campaign on the Cisco Gateway)

Re: How will AMP interact with Windows Defender? 💃

ckuwajima — Thu, 10 Dec 2020 12:48:10 GMT

Hi,

Windows Defender is included in AMP4E exclusions, and will not be touched.

From Windows prospective, upon connector installation, by default it will recognize AMP4E as the virus & threat protection in Windows Security and will deactivate Windows Defender periodic scans.

Re: How will AMP interact with Windows Defender? 💃

UMontero — Thu, 10 Dec 2020 17:11:35 GMT

Although the above state is correct, it will only work this way if we have AMP and Tetra enabled on the Policy, if we don't have Tetra enabled, then Windows defender will continue to be considered as the Default virus & threat protection in Windows Security. Also Windows Defender will not disable automatically on Windows servers version 2016 and above https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User%20Guide.pdf (Page 106)