What are the possible reasons why AMP agent mark a malicious file as quarantine failed? We have instance that the agent pop-up and showed threat detected but based on the description it was quarantined failed. Thanks!
Endpoint Security
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Endpoint Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AMP for Email
(13) -
AMP for Endpoints
(837) -
AMP for Web
(19) -
Buying Recommendation
(4) -
Cisco Bugs
(1) -
Cisco Cafe
(1) -
Cisco Vulnerability Management
(7) -
Collaboration Endpoints
(1) -
Community Feedback Forum
(1) -
Community Ideas
(1) -
Endpoint Security
(557) -
Event Analysis
(1) -
General
(1) -
Identity Services Engine (ISE)
(2) -
Integrations
(1) -
Meraki Systems Manager
(883) -
NGFW Firewalls
(1) -
NGIPS
(1) -
Orbital Advanced Search
(26) -
Other AMP Topics
(156) -
Other NAC
(1) -
Other Network Security Topics
(1) -
Other Security Topics
(1) -
Policy and Access
(1) -
Prioritization
(1) -
Room Endpoints
(1) -
Secure Endpoint
(1) -
Vulnerability Management
(9) -
Wireless
(1)
- « Previous
- Next »
Forum Posts
Hi bro, I have a problem with ASA5516-X with firepower. When I sent a email, which is attached a file 20 MB, it is faild. After that, I have tested again, I find out that if a file which have smaller size 10MB, it work ok. Can you give me advise? Tha...
Resolved! Cisco AMP 5.1.7 service
I have errors in windows event viewer system logs " event 7011 A timeout (30000 Milliseconds) was reached while waiting for a transaction response from the CiscoAMP_5.1.7 service"Continuously this shows up in system log Any idea
Hi,I installed AMP Private Cloud virtual appliance version 2.3.5 in Air-Gap mode.I downloaded the protected DB ISO file using the amp-sync tool.When I am trying to update the protected DB from the Administration portal I am getting the following erro...
Why is that so ?I plan to implement AMP for networks and now looking into AMP for endpoints. But my endpoint is small for initial phase. Looking into manageability in FMC.
Resolved! FireAMP agent removal
Sourcefire newbie here...I have to remove FireAMP agents from computers, but I would like to do this from the FireAMP management console. I know that if you navigate to Management>Computers and you highlight the computer in question you have the opt...
I believe I am getting a false positive for ChromeSetup.exe. I downloaded the Chrome beta installer direct from Google. SHA-256 a1fa0737b15a05ac5073985839af253f3470c162730f89f604eb3dc008066c05 Virus Total analysis https://www.virustotal.com/en/file/a...
Hello, We use AMP integrated with Firepower and send events to our SIEM via eStreamer. We have been seeing events with a "file_action" of 0. Our documentation does not identify what this type of event might be. The most current documentation I co...
We are trying to understand why it took around four (4) days for the file analysis to determine the disposition of the unknown file with network trajectory below (screenshot). Please have someone take a closer look on our IPS and provide comprehensi...
Resolved! AMP for EP on Servers - Skip DFC
When installing on servers it is recommended to use the /skipdfc switch. I am looking for a way to validate that this switch was or was not used on a specific server. There should be a way to verify that the DFC drive is not installed, but I haven't ...
Hello, I am getting 'MALWARE-CNC Win.Trojan.Glupteba C&C server READY command to client" alerts from Source port 10003 to high numbered destination ports in my network. Most of the source IP belongs a Linux server in my network. Where can I find the ...
Resolved! AMP integration
Possibilities of AMP integration with Nexus 1000v as well on the Citrix Hypervisor version of Nexus 1000v
When Cisco AMPI (windows based) When Cisco AMP for Endpoint will be supported on Citrix VDI (windows based) environment?
Resolved! System Requirements AMP4E
Hi, what system requirements are needed for AMP for Endpoints?
How can we block/avoid scrapping? is there any category in sourcefire to check?
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 04-20-2026 08:04 AM | ||
| 04-20-2026 04:37 AM | ||
| 03-26-2026 01:13 AM | ||
| 09-15-2025 11:10 PM | ||
| 08-07-2025 11:30 PM |
