topic Re: Secure Endpoint or Client? in Endpoint Security

Secure Endpoint or Client?

smaddox — Mon, 16 Dec 2024 21:46:06 GMT

Hi everyone.
I am hoping to get a little clarity. For weeks now, off and on throughout the day, I have been testing the deployment of the Secure Client with an MDM. Particularly Jamf. I have gone through the doc several times as well as pushing out the finished .pkg a few times. Where the water get a little muddy is - Is the Secure Endpoint (Amp) module included or merged with Secure Client? It's not addressed when making the install_choices xml. When I push the install. from jamf, I get a successful install. Secure Endpoint AMP isn't listed as being active. Only Umbrella. Both modules are listed in my windows deployment.
Confused.

Re: Secure Endpoint or Client?

Ken Stieers — Mon, 16 Dec 2024 22:33:25 GMT

Ok... so I assume you're using the Cisco Secure Client website to build and download the cloud managed package.
Secure Endpoint can be installed using the CSC package, but it doesn't have to be, and it may not be an option for Mac. (it is for Windows)

Re: Secure Endpoint or Client?

Aref Alsouqi — Tue, 17 Dec 2024 10:52:37 GMT

Yes it could be included into Cisco Secure Client but it's not included by default, so you have to install it before it shows up in Cisco Secure Client main tiles window. After you install it it would show up in a separate tab similar to how AnyConnect VPN, Umbrella, ISE posture, NAM, etc show up. The link you provided does not seem to cover installing Secure Endpoint, it seems to cover only deploying Secure Client and Umbrella module.

Cisco Secure Client Data Sheet - Cisco

Re: Secure Endpoint or Client?

smaddox — Wed, 18 Dec 2024 20:50:25 GMT

You are correct. The link doesn't address Secure Endpoint. I haven't found one yet that does include it in the build pkg or what to add in the choices.xml to activate it.

Re: Secure Endpoint or Client?

smaddox — Thu, 19 Dec 2024 15:03:40 GMT

I do believe I have found a solution to my problem. Instead of downloading the pre-deploy package from my Umbrella instance, I downloaded the package from Cisco downloads. It includes amp enabler. From the docs this os only available for MacOS. I am testing this today.

Re: Secure Endpoint or Client?

Roman Valenta — Thu, 19 Dec 2024 20:57:46 GMT

The question here is what would you like to accomplish. But if the intention here is to install the whole package including Secure Endpoint client then that will be only possible either with separate installation like Ken pointed out with Secure Endpoint installer downloaded through your SE Console or you will have to built your package using Secure Cloud Control or XDR.

AMP enabler is no longer available for Windows computers starting with Secure Client 5.x

Also if Secure Endpoint is already installed and you push Secure Client the SE will join the Secure Client GUI

Re: Secure Endpoint or Client?

smaddox — Thu, 16 Jan 2025 16:56:45 GMT

Roman you are correct. For the MacOS I found out Secure Client and Secure Endpoint has to be installed separately. The ability to have them "modulated" in the client app as it is in Windows, is not yet available for MacOS.