I have an NCS5500 in lab where I can enable MACSEC on 10G ports or higher. I would like to configure macsec from this device to an ISR4431, that has the hsec license and the NM-2G module (required for macsec). I have connected these devices to a nexu...
Forum Posts
I am not sure about the relationship between users registered in Secure Endopoint and users registered in Secure Client. To register as a CSE administrator,Can I just register from "New User" of "Secure Endopoint"?2. Do I need to register "Invite Use...
Hi,I’m dealing with a recurring false-positive event related to one of our internal service executables, and I’d like to clarify which exclusion type is considered best practice according to Cisco Secure Endpoint’s engine behavior.We have an interna...
Hi all, I was wondering if anyone knew of a good way to preserve the device trajectory events on a computer, so that it's not lost after 30 days. I know the Forensic Snapshot can be helpful, but how do I save all of the device trajectory events or ev...
In trying to investigate the source of a Mac Book M4 Pro crash that made the trackpad unresponsive to clicks, and also killed the Dock and Application Switcher, I found multiple log entries on my Mac (running Sequoia 15.6.1) of the form “com.cisco.en...
We are experiencing unusual issues with computers running Windows 11 that have Cisco Secure Client 5.1.6.1307 and Secure Endpoint 8.4.5.30483 installed. The problem is that Windows Search suddenly stops working and just keeps spinning without returni...
Resolved! CSIDL_BASEDIR Path Exclusion?
What does the CSIDL_BASEDIR path exclusion do? I keep looking online for documentation and can't seem to find anything that gives a clear answer.
Cisco used to provide their verdicts on files they found were clean or malicious, within Cisco Secure Endpoint. However, today I noticed that I could not get the verdict to load for any of the files. I get this constant loading symbol that never load...
Hi all,Another admin in my org brought this to my attention today. I believe it's largely a non-issue but figured I'd bring it up for discussion here in case I might be wrong about it. MS Code Integrity is throwing out errors for AMP for a .dll found...
Hi,I see this in Event Viewer — what is it? Could it cause a problem?Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Cisco\AMP\scriptid\damsicom64...
Resolved! Access policy for MyDevices Portal
Tell me please. Is it is possible to create an access policy for the MyDevices portal to allow access only to a certain group in AD?At the moment, I have done this way:In the Identity Source Sequences at MyDevice_Portal_Sequence I left "Internal User...
How's it going Team!We have an issue with our Primary FMC its running the following Image:Secure Firewall Management Center 1600Version 7.4.2.1 (build 30)When attempting to run a scheduled back up, we received the below errorIs there a way to find th...
We understand that if we "exit" the Cisco Secure Client (CSE) icon, we will temporarily stop the CSE, but the icon disappears from the taskbar, but the process seems to be running as it is.1. What is the meaning of this "finish"?2. Does the process a...
We’ve identified a potential vulnerability in scenarios where an attacker gains access to a system and reboots it into Safe Mode. During Safe Mode, we noticed that Cisco Secure Endpoint (AMP) appears disabled, which could leave the system exposed and...
I'm unable to get any devices to scan today in Cisco Secure EndpointChecking the device's events, no failed scan or any other errors. Multiple tenants. Something going on with AMP?
