Is there a way to submit Linux file for virus analys within the Secure Endpoint Product? Today it looks like the only files and sandboxes/vm images for analys is Windows. If there is an other tools to use we would like to know since we are running Se...
Forum Posts
Secure Endpoint classified BemReporter.exe SHA256: bbffca2256d58c47fec4cb62ff4cb3af2adf9ecb34eba8771dbf4daa90d99640 (C:\Program Files\HP\Sure Click\4.4.2.2945\servers\BemReporter.exe) disposition unknown which triggered a retrospective quarantine of ...
I need help deploying/installing the AMP Connector through Intune. I have converted the 'amp.connector.exe' file to the Intunewin format. However, I believe I am having trouble with the installation and uninstallation commands. I need assistance in f...
Hi all, I'm wondering if there is a way to turn off failed authorization logging in ISE? When someone leaves open a stale ASDM session our logs become flooded with failed Auth attempts. I'm guessing this is because the ASDM is trying to keep the rule...
Hi All, Is it possible to restrict or block any urls using amp ?. Like client wants to restrict windows update using amp install in user machine. Please advise.
Hello DearsWe are planning to impelment Cisco ISE with 802.1x and we have the following quiestions :1-is it possible to connect ISE with Microsoft AD so the login user for 802.1x is done with AD username/password?2-is 802.1x is working without issue ...
My ultimate goal is to have some form of CMD line logs sent into Splunk. Due to reasons, Sysmon or any other tool is not possible. We only have AMP logs being sent to Splunk. Currently we only get what CMD line arguments were used if there is a cloud...
Resolved! AMP integration with Secure X
HelloI am trying to integrate cisco secure X with AMP for end point and we have private clould for AMP, is this integration possible ? I only can see its available for AMP in public cloud.
We've had a handful of machines get flagged for the AMSI provider being deleted from the registry, and haven't been able to put a finger on the cause. The registry key being deleted looks like it's the one for Windows' built-in AV ( {2781761E-28E0-41...
Trying to update StealthWatch to 7.4.2 the update fails because of the changes pending.I have rebooted the flow server but it still has the same message.Got this message on the server too"The Flow Collector is unable to communicate with the Manager.I...
Dear all, I use FSLogix in my envirenment so that FSlogix maps a VHDX file as a local drive, which is located on a network path. This local drive has no drive letter and I have to perform an exclusion for this VHDX file in CISCO AMP. I'll really apre...
I was wondering how those in in the Amp for Endpoints Community deal with Generic IOC and Cloud IOC events. The vast majority of events I get are a result of RMM tools (Kaseya, N-Able, Connectwise, etc.) used by MSPs to manage the workstations. The...
We are installing cisco universal client can anyone please guide for cisco AMP enabler module what would be the file format ?The File Format will be XML or JASON ?Where the file will be stored or in which folder file will be saved ?
I deployed Cisco Secure Endpoint Windows Connector 8.1.7. Deploying it to our end users locked up Office, some browsers, and some shortcuts became unresponsive. After removal of 8.1.7 the issue went away. Reverting back 8.1.5Anyone else having an iss...
HelloCan I have some guidance and assistance please. Our organisation currently has Microsoft MDE running alongside Microsoft Edge and we have recently subscribed to Umbrella SIG. Recently we have been getting notifications from MDE of websites/URLs ...
