cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1680
Views
0
Helpful
1
Replies
Bob Bagheri
Beginner

AMP for Endpoints Deployment

Hi, I just deployed AMP for my first alpha test devices however, I don't see anyway to notify an administrator if an endpoint is compromised or a threat is detected.  Am I missing something here?  I would assume that alerts / email notification  would be standard.


Thanks in advance,

Bob

1 REPLY 1
Dinesh Verma
Cisco Employee

Hi Bob,

 

You can create an alert filter and subscribe to it. That way you would be notified to that specific filtered alerts. Go to Analysis->Event->Filter the event (Subscribe).Take a  look to snapshot attached.

 

Regards,

Dv

Content for Community-Ad

This widget could not be displayed.