Endpoint Security

cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Cisco CyberSecurity

Forum Posts

Hi Experts,I am interested in a detailed documentation on how to set the Local AMP Update Server for Tetra definitions. More exactly the customer has some specific questions as follows:1) If a local update server is used, and an endpoint is not in th...

ccalin by Cisco Employee
  • 7047 Views
  • 6 replies
  • 0 Helpful votes

Good day, My question about cisco AMP is about its ability to remove malware from endpoints, whether it be servers, PCs or mobile devices. AMP is able to detect, analyze and block malware but if it is that an endpoint is infected with malware, can it...

Currently when running Systems Manager on a PC you can add a column to the dashboard to display weather the machine is compromised or not. This is retrieved from the Windows Security Centre. This can be updated by the built in Windows Defender, or ...

image.png image.png
Philip D'Ath by Meraki Community All-Star
  • 17719 Views
  • 11 replies
  • 1 Helpful votes

Resolved! Event Streams

Hello,   Previously I was using the AMP API and just pulling down all events on a 10 minute interval but it's not a very pretty process since you have to set bookmarks whenever you pull down the data. Therefore I'd like to move to the event stream pr...

ericl42 by Frequent Visitor
  • 6656 Views
  • 5 replies
  • 0 Helpful votes

Hi Experts,   a quick question on AMP for network, I was going through an online training on AMP, and there was a slide called "Malware and file Policy Order of Processing" the slide had a flow chart, the first block in the charts states "file size >...

We are having an issue with IP Black/White list.  We've developed a containment policy which whitelists several necessary addresses (e.g. AMP addresses and DNS services), and configured the blacklist to the rest of the network's private IP address sp...

bo3500001 by Visitor
  • 8685 Views
  • 5 replies
  • 0 Helpful votes