AMP4E/Secure Client on servers, skipDFC/skipTetra?

[Ken Stieers]

I'm rolling AMP out to our servers, and there are notes in the docs about not installing the Tetra or DFC drivers on servers that  have a "large number of network connections".  How many is "large number of network connections"?   Is there a number anywhere?

Also... if you don't install the drivers, and then the machine gets assigned a policy with those enabled, what happens?

[Troja007]

Hello @ken ,
we added some more detailed content around this installation switch in the Best Practices Guide. As always, it depends of the type of the server. Take a look at the guide, where you have to take care about the network driver: https://www.cisco.com/c/en/us/products/collateral/security/fireamp-endpoints/secure-endpoint-og.html

If you use the /skipdfc installation switch, the driver is not installed during setup. If you enable "network" in the policy, this will not add the driver to the connector installation. If you want to activate the network protection feature later, you may install the Connector software without the /skipdfc installation switch, so you can enable the feature later by enabling it in the policy.

Greetings,
Thorsten