topic Re: Anyone else seeing this FP? in Endpoint Security https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439771#M6263 <P>It's been 2 hours now since our system picked it up from AMP and Firepower.&nbsp; &nbsp;Is this false positive or for real?&nbsp; &nbsp;</P> Tue, 27 Jul 2021 17:40:49 GMT dotran 2021-07-27T17:40:49Z Anyone else seeing this FP? https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439722#M6261 <P>Getting a stack of DFC Threat Detected for an ip...</P><P>205[.]185[.]216[.]42</P><P>Its a CDN in Texas...&nbsp;</P><P>Talos says it's bad... but its resolving to things like&nbsp;dl.delivery.mp.microsoft.com, etc.</P> Tue, 27 Jul 2021 15:51:45 GMT https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439722#M6261 Ken Stieers 2021-07-27T15:51:45Z Re: Anyone else seeing this FP? https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439768#M6262 <P>Hello&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/321979">@Ken Stieers</a>,<BR />talos is already investigating the issue. Should be fixed soon.<BR />Greetings,<BR />Thorsten</P> Tue, 27 Jul 2021 17:36:23 GMT https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439768#M6262 Troja007 2021-07-27T17:36:23Z Re: Anyone else seeing this FP? https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439771#M6263 <P>It's been 2 hours now since our system picked it up from AMP and Firepower.&nbsp; &nbsp;Is this false positive or for real?&nbsp; &nbsp;</P> Tue, 27 Jul 2021 17:40:49 GMT https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439771#M6263 dotran 2021-07-27T17:40:49Z Re: Anyone else seeing this FP? https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439793#M6264 Looks like a false positive, and should be fixed now.<BR /> Tue, 27 Jul 2021 18:09:30 GMT https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439793#M6264 brmcmaho 2021-07-27T18:09:30Z Re: Anyone else seeing this FP? https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439798#M6265 <P>Thanks for posting, starting to consider isolating so pleased you posted this as when looking into the detail didn’t stack up.&nbsp;</P> Tue, 27 Jul 2021 18:18:02 GMT https://community.cisco.com/t5/endpoint-security/anyone-else-seeing-this-fp/m-p/4439798#M6265 soup_dragon 2021-07-27T18:18:02Z