cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2379
Views
0
Helpful
1
Replies

AMP for Endpoints Deployment

Bob Bagheri
Level 1
Level 1

Hi, I just deployed AMP for my first alpha test devices however, I don't see anyway to notify an administrator if an endpoint is compromised or a threat is detected.  Am I missing something here?  I would assume that alerts / email notification  would be standard.


Thanks in advance,

Bob

1 Reply 1

Dinesh Verma
Cisco Employee
Cisco Employee

Hi Bob,

 

You can create an alert filter and subscribe to it. That way you would be notified to that specific filtered alerts. Go to Analysis->Event->Filter the event (Subscribe).Take a  look to snapshot attached.

 

Regards,

Dv

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: