cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1737
Views
15
Helpful
1
Replies

AMP behavior while offline

venianakis
Level 1
Level 1

Hi team

How does AMP Endpoint behaves while being offline?

Is there a guide somewhere to explain how AMP protects systems while offline?

Thanks 

 

 

1 Reply 1

Troja007
Cisco Employee
Cisco Employee

Hello @venianakis,
the connector includes engines which are working online, and other which are also working offline. Enclosed some infos which may clarify your question. Offline outlines which engines are working withou any need to be connected to the Backend. Cloud IOCs are working online and offline, as the backend engine processes all the telemetry data 7 days back.
BTW, have seen a small issue about exPrev in the screenshot, as the engine triggers under several conditions.

 

Engines_Part1.pngEngines_Part3.pngEngines_Part4.pngEngines_Part2.png

Greetings,
Thorsten