topic Re: Cisco Secure Endpoint service did not appear on my device? in Endpoint Security

Cisco Secure Endpoint service did not appear on my device?

nguyen-loc — Wed, 25 Sep 2024 04:24:49 GMT

Re: Cisco Secure Endpoint service did not appear on my device?

balaji.bandi — Wed, 25 Sep 2024 07:01:56 GMT

what is the version cisco client installed and what OS is this windows 10, 11 or new one H2 ?

if this installed as service it should show there agent running.

Re: Cisco Secure Endpoint service did not appear on my device?

nguyen-loc — Wed, 25 Sep 2024 08:33:24 GMT

Hello BB,

OS: Windows server 2022 version 21H2 (OS Build 20348.2700)

cisco client version 8.2.1.21612

After installing cisco client showed "Disabled" and I checked did not see in windows services.

Re: Cisco Secure Endpoint service did not appear on my device?

Roman Valenta — Wed, 25 Sep 2024 12:58:17 GMT

Hi BB

Did you install the Secure Endpoint manually or was this pushed via MDM ? Any errors during installation ?

Also speaking of MDM is this device by any chance manage by Intune?

Re: Cisco Secure Endpoint service did not appear on my device?

nguyen-loc — Thu, 26 Sep 2024 01:23:51 GMT

Hi Roman,

I installed the Secure Endpoint manually. No alert or error during installation.
This device was not managed by Intune.
Do you suggest where to get installation log for further check?

Re: Cisco Secure Endpoint service did not appear on my device?

Roman Valenta — Thu, 26 Sep 2024 02:41:46 GMT

Install log is usually generated under C:\ProgramData\Cisco\AMP\immpro_install.log you can take a look at that file for some clues.

Also if you navigate to C:\Program Files\Cisco\AMP\8.2.1.21612 can you find sfc.exe there? What happened if you try start the EXE manually?

I know you mentioned that this device is not managed by Intune but take a look at this TZ article bellow.

https://www.cisco.com/c/en/us/support/docs/security/secure-endpoint/222390-secure-endpoint-connector-updates-bein.html

It was discovered that recent addition to Intune was causing very similar issue , in other words Secure Endpoint was installed but sfc.exe was blocked and never start. You will also see some examples of error messages in that article as well. Again might not be your problem but it will give you some idea what to look for.

Re: Cisco Secure Endpoint service did not appear on my device?

nguyen-loc — Thu, 17 Oct 2024 04:25:53 GMT

Hi Roman
I excluded path "C:\Program Files\Cisco\AMP" in Window security
then Cisco client is working.

Thank you!