AMP group management via Active Directory

[olfuddyduddy]

It's necessary to organize connector endpoints by their location within the Active Directory organizational unit structure in an automated fashion. Deployment documentation suggests group should be defined at the point of connector deployment. This method is too static and tedious within the confines of the AMP console. How can I mirror the AD OU structure within AMP console and apply policies according?

[Wojciech Cecot]

Hello

Unfortunately AMP does not provide integration with Active Directory at the moment, however there is a script available, where you can sync Active Directory (LDAP) Groups with AMP groups, please take a look: https://github.com/Cisco-AMP/amp4e_ldap_tool

-Wojciech