cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1348
Views
0
Helpful
1
Replies
Highlighted
Beginner

AMP for Endpoints Deployment

Hi, I just deployed AMP for my first alpha test devices however, I don't see anyway to notify an administrator if an endpoint is compromised or a threat is detected.  Am I missing something here?  I would assume that alerts / email notification  would be standard.


Thanks in advance,

Bob

1 REPLY 1
Highlighted
Cisco Employee
Cisco Employee

Hi Bob,

 

You can create an alert filter and subscribe to it. That way you would be notified to that specific filtered alerts. Go to Analysis->Event->Filter the event (Subscribe).Take a  look to snapshot attached.

 

Regards,

Dv

Content for Community-Ad
This widget could not be displayed.