Endpoint Security

During an automated isolation response from secure client, will the Isolated device still be reachable from the Secure client dashboard, and will the device communicate using DNS and be protected by Umbrella?

Hi everybody, Kindly advise how do i extend my Cisco ISE 2.6  evaluation license.90 days period is about to end & my base license usage is less than 30.  Thanks in advance.

Hi, yes, it is possible to extend a Cisco ISE Evaluation. You just need a working Smart Account and to transfer the UDI Details of ISE "Administration > System > Licensing" to Cisco via. https://cep.cloudapps.cisco.com/#/ or in my case, it was like t...

Hello,I noticed a minor error in the Secure Endpoint API documentation that I wanted to bring to your attention.The HTTP response headers are listed asX-Rate-Limit-*but when I tried calling "https://api.eu.amp.cisco.com/v1/computers", the API returne...

Hello everyone, does anyone have any idea how I can see exactly which processes have been killed? In Secure Endpoint I can only find the file observables but no command line. How would you continue your research here? Thanks in advance.  

Boa tarde pessoal, como estão?   Gostaria de verificar com vocês se seria possível bloquear no Secure Endpoint uma versão especifica do Webex. Se for possível poderiam me repassar esse passo a passo? Agradeço.

Hello,I am currently working on an integration that requires me to export details about our computers from the Secure Endpoint APIOne of the information I'm interested in is the timestamp from the last AV definition update.However, I have noticed tha...

I am using python to interact with this API: https://developer.cisco.com/docs/cloud-security/#!destinations-delete-destinations-from-destination-listWhen I run my code, I get 200 success, BUT the domain I supposedly removed is still there when I look...

Hello,We have users connecting through the VPN (SSL VPN) with the any connect client. I'm asked to look at possible solutions to add an MFA authentication.Currently, users log into the VPN with their LDAP account.the ASA queries an internal radius se...

Hello, we are testing file quarantine on a newly built sensitive server. I want to understand if there is a way for us quickly reverse the quarantined file and restore it on the server? I want to undo the quarantine action on the server. Thanks in ad...

HiI am trying to sperate computers between the organizations we are managing but unfortunately, I was unable to find any option that I could move several computers from One Organization to Another in Cisco AMP Online Console Uninstalling Connectors f...

Hi All,We are using shared machine like multiple machine hosted on Single VM server, where we Observed our duplication of user in Mrr Server policy but when i check Mrr User policy no such duplication i found. Can anyone help the root cause of this.S...

Hello, I have several computers in the company and I wonder if it would be possible for each computer to belong to group A (for example) in AD has a group policy in AMP and if I belong to a computer for group A the computer becomes a member of AMP gr...

I have been using the Powershell code below to access Secure Endpoint to do maintenance tasks for a couple of years now.  Removing dups, exporting computers...etc.  As of a few days ago I am getting a "Invoke-RestMethod : The remote server returned a...