topic Re: Cisco Secure endpoint with Defender in Endpoint Security

Cisco Secure endpoint with Defender

Tobias.S — Wed, 07 Jun 2023 11:42:34 GMT

We currently use Cisco Secure Endpoint (Tetra enabled) together with Windows Defender on servers (2019, 2022). We havent noticed any issues with this combination yet, but would we benefit from disabling Windows Defender or possibly turning off the tetra?

Re: Cisco Secure endpoint with Defender

Matthew Franks — Wed, 07 Jun 2023 12:34:13 GMT

Tobias,

When you have Tetra enabled and the definitions are downloaded, Secure Endpoint registers as the system's Threat Protection software. You can see this in the Virus & threat protection settings section.

There are currently no known compatibility issues with Secure Endpoint and Defender so running them together shouldn't cause any issues but disabling one would cause the other to take over.

Thanks,

-Matt

Re: Cisco Secure endpoint with Defender

Tobias.S — Wed, 07 Jun 2023 12:45:39 GMT

Thank you for the answer Matthew. As of windows server 2019 the WCS do not register Cisco Secure Endpoint if you do not disable defender, even if tetra is enabled.

Re: Cisco Secure endpoint with Defender

Matthew Franks — Wed, 07 Jun 2023 12:57:47 GMT

Good point. Sorry, I wasn't paying enough attention to the OS you mentioned!

-Matt

Re: Cisco Secure endpoint with Defender

JJ999 — Wed, 28 Jun 2023 20:58:53 GMT

@Tobias.S how did you disable defender? I uninstalled it, didn't see a way to disable. Now AMP doesn't show as the AV/Threat Protection at all.

Re: Cisco Secure endpoint with Defender

Tobias.S — Wed, 12 Jul 2023 07:45:22 GMT

I did not disable defender. I run Cisco Secure Endpoint and defender side by side on both servers and clients. But as you say its not registring as in security center.

Re: Cisco Secure endpoint with Defender

ThinkG_AB — Thu, 13 Jul 2023 20:45:09 GMT

Its a windows server policy, you have to remove the feature to disable it now.

Re: Cisco Secure endpoint with Defender

jmornhineway — Thu, 02 Nov 2023 13:59:13 GMT

Log file from Defender. Cisco Secure Client turns off a setting in defender, Defender sees it, reports a threat, turns it back on...

2023-11-01T11:52:16.456Z DETECTION VirTool:Win32/DefenderTamperingRestore regkeyvalue:hklm\software\policies\microsoft\windows defender\\DisableAntiSpyware

Windows 11 build 22621.2506

Cisco Secure Client version 8.1.5.2132

Re: Cisco Secure endpoint with Defender

mski7861 — Thu, 02 Nov 2023 16:05:56 GMT

I always tried so hard not to run multiple AVs on a single machine.