topic Re: Secure Endpoint Advantage API v3 how to remove old computers in Endpoint Security

Secure Endpoint Advantage API v3 how to remove old computers

Matt Hosford — Mon, 08 Aug 2022 13:33:43 GMT

Secure Endpoint Advantage API v3 how to remove old computers from the portal?

I'd like to automatically remove computers from the portal that have not been seen in 2 months. Looking at the API documentation here https://developer.cisco.com/docs/secure-endpoint/ I'm not seeing how to manage them. Am I missing something? Does this need to be setup in a policy?

Re: Secure Endpoint Advantage API v3 how to remove old computers

Matthew Franks — Mon, 08 Aug 2022 14:12:58 GMT

Have you tried using this script?
https://github.com/CiscoSecurity/amp-04-delete-stale-guids

You can customize the time frame. Just be aware, this doesn't uninstall anything so if the endpoint comes back online, you would see it in the console again.

Re: Secure Endpoint Advantage API v3 how to remove old computers

Matt Hosford — Mon, 08 Aug 2022 14:37:19 GMT

Oh wow. I'll check this out. This appears to be exactly what I'm looking for. Thanks Matthew for the quick reply!

Re: Secure Endpoint Advantage API v3 how to remove old computers

Troja007 — Tue, 09 Aug 2022 09:27:45 GMT

Hello @Matt Hosford ,
regarding the uninstall feature with secure endpoint. FYI, the feedback button in Secure Endpoint generates a Feature Request in our global Feature Request tool. Today, this is a one way communication. But finally, any FR helps to prioritize upcoming and new features.
Greetings, Thorsten

Re: Secure Endpoint Advantage API v3 how to remove old computers

Matt Hosford — Tue, 09 Aug 2022 17:50:10 GMT

That's good to know. What Matthew Franks shared is what I needed.

Re: Secure Endpoint Advantage API v3 how to remove old computers

johnosn — Fri, 09 Sep 2022 18:00:30 GMT

An alternative to this would be to use the SecureX Orchestration workflow to remove inactive endpoints.
0056-remove-inactive-endpoints