For anyone else using XDR.Since the change occurred where all alerts from SE are sent XDR we have had little to zero incidents in XDR with SE observable's. While this may be a benefit and working as designed to only promote what would be considered a...
Forum Posts
Hi,I am getting this error while installing v8.2.1.21612. I have completely uninstalled the previous versions and rebooted several times. Many computers in our environment do not have this issue only a few Windows 10 machines. Any help would be great...
Hey, I have ISE deployment with 16 nodes 8 in DC and 8 in DR, In DC i have 1 primary PAN, 1 MnT and 6 PSNs. Same goes for DR, I have the licenses on my smart account that has 30k premier licenses and 2 device admin nodes, when i link my smart accou...
Resolved! About Cisco Threatgrid API
Hi team,I want to connect to Cisco Threatgrid API and then pull the user list and delete specific users. I want to pull the user list because I need the user IDs to delete these users. But I couldn't find the appropriate endpoint. There are different...
It blows my mind that there is no option to generate a log file during the client install. Am I wrong?Understand Command Line Switches for Secure Endpoint Installer - Cisco
Hello, We have some issue with an API used to register endpoint on ISE. I'm looking for logs, report where I can see Identity Group Endpoint, registration, move and deletion. Currently, I only find the last/current status. Hope it's clear, thank you....
Resolved! Windows Defender and Cisco ISE
Dear All, I need to know if Cisco ISE 3.1 is compatible with Windows Defender? I found this document on Microsoft site that confirm it: Network access control integration with Microsoft Intune | Microsoft Docs But I' d like to know if it is also true...
Good morning,I cannot access Secure Endpoint on 07/18/2024 with the same password I use to submit the TAC Case. I know my pw is accurate. Has anyone else experienced this today? I wonder if this is a me issue or a Cisco issue.My case is 697674126Than...
Resolved! Hidden User Created | CtxPkmService
Good morning,Anyone else who uses Citrix and Secure Endpoint seeing alerts for Hidden User Created with the value CtxPkmService being added into \MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList ?This looks a FP ...
Hi Cisco Community,I've run into an issue with the Cisco Secure Endpoint Connector on Windows Server 2008 R2 Service Pack 1. Specifically, when two users login simultaneously, the policy changes automatically from English to Chinese. Interestingly, o...
Admins being admins like to use powershell to solve certain task. To do this they will often run a powershell file downloaded from a server, i.e:C:\windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -ExecutionPolicy Bypass -Command iex...
We have deployed Byod access for mobile devices on wireless using Cisco ISE guest portal with AD authentication. Customer ask is the user should not get the Portal redirect and authentication every day, it should be able to connect directly on the ba...
As of 6/17 it looks like Cisco is flagging and stopping endpoints from using Nvidia Geforce Experience with threat - 7f3a52c8…5a299936 nvsmartmax.dll W32.PCShareBackdoorDetected.iocI am not sure how to report this is cisco as a false positive?
I get this error:"There are no Endpoint IOC documents activated."It seems that I need to create a new policy for full scan. How to do it? TIA
We had an endpoint automatically isolate with a high severity retrospective detection, as per our settings. A couple days later, the same endpoint had another high severity retrospective detection but there was no attempt by the console to automatica...
