Endpoint Security

Hi,I installed AMP Private Cloud virtual appliance version 2.3.5 in Air-Gap mode.I downloaded the protected DB ISO file using the amp-sync tool.When I am trying to update the protected DB from the Administration portal I am getting the following erro...

Why is that so ?I plan to implement AMP for networks and now looking into AMP for endpoints. But my endpoint is small for initial phase. Looking into manageability in FMC.

I believe I am getting a false positive for ChromeSetup.exe. I downloaded the Chrome beta installer direct from Google. SHA-256 a1fa0737b15a05ac5073985839af253f3470c162730f89f604eb3dc008066c05 Virus Total analysis https://www.virustotal.com/en/file...

Hello, We use AMP integrated with Firepower and send events to our SIEM via eStreamer.  We have been seeing events with a "file_action" of 0.  Our documentation does not identify what this type of event might be.   The most current documentation I c...

We are trying to understand why it took around four (4) days for the file analysis to determine the disposition of the unknown file with network trajectory below (screenshot).  Please have someone take a closer look on our IPS and provide comprehensi...

Hello, I am getting 'MALWARE-CNC Win.Trojan.Glupteba C&C server READY command to client" alerts from Source port 10003 to high numbered destination ports in my network. Most of the source IP belongs a Linux server in my network. Where can I find th...

When Cisco AMPI (windows based) When Cisco AMP for Endpoint will be supported on Citrix VDI (windows based) environment?

How can we block/avoid scrapping? is there any category in sourcefire to check?

We've developed a guide to help you get the most out of AMP for Endpoints.  Check it out here and you'll get information on how to use file analysis, using continuous analysis & retrospective security, and how to stop malware.Three Ways to Get Better...

one of our appliance (non-cisco) detect the malware. we would like to know how can we block the malware to sourcefice. please see attached sample malware.

When I deploy AMP in the customer environments, it detected office365. But, the customer not using this application. If any setting can I change?