I'm trying to find information resources that can provide some insight as to how others have overcome the challenge with managing servers and their applied policy, when it comes to necessary exclusions and policy options. Presently I am using 1 poli...
Forum Posts
I have a requirement to start reviewing the information that can be gathered from Secure Endpoint using Endpoint IOC scans as a response tool post compromise. I found an old Cisco document 118899, from 2015 and was curious if there is a more recent d...
Hi AllWe're seeing issues with our write cache filling on our Citrix environment trawling through procmon we see clamav for cisco amp creating a massive amount of writes, generating a debug log and looking at around the time of the writes we see the ...
Resolved! Kena Risk Score On server
Hello, We have recently begun deploying Secure Endpoint on our servers. However, under the Kena Risk Score tab, we are consistently encountering the message "Score Unavailable: Windows 10 or 11 required." I am curious to know whether Secure Endpoint ...
Hi team, Could you please assist us why we are receiving policy update failed for few devices and what does serial number specify ? Error details Error code - 4294967295 Description - Unknown Error. I understand policy updates are automatic and it...
Hi Cisco Community,We are receiving the following error when trying to export a csv from Cisco Secure Endpoint, is anyone else experiencing a similar issue? This has been ongoing for a few days now.
Thought I would share some things I found in case it saves someone else some time. The API documentation is good, but all in cURL and some of the items can be a little bit misleading when coming at it from a Windows Admin background. (I am not going ...
We are currently needing anything block/allow listed in AMP for export, however this list is very extensive (hundreds of entries) and from the portal it only appears you can view them, and must click on each on to view the hashes/rule to copy. Is the...
We currently use Cisco Secure Endpoint (Tetra enabled) together with Windows Defender on servers (2019, 2022). We havent noticed any issues with this combination yet, but would we benefit from disabling Windows Defender or possibly turning off the te...
Cisco Secure EndpointWhen initiating Full IOC scans we sometimes encounter the event log showing the results of the scan as (Scanned 0 objects. Found 0 matching objects and 0 malicious detections | Endpoint IOC Scan clean)Normally we expect the event...
Hi All,I have observed lots of demo computers have been randomly added to pre-default group of Secure endpoint console i.e (protect, audit, triage). However i have deleted all those random computers and group also. What it could be? Can it be a some ...
We're observing a threat detection notification on SEP for known Microsoft apps. We believe it's false positive. We were not able to submit file reputation case on Talos.All three files are located in C:\Program Files\WindowsApps\Microsoft.DesktopApp...
I am part of a team doing a deployment for a customer, and they have chosen to use the Cisco Secure Endpoint, Endpoint Protection, AMP, whatever it is called. This is the first problem, because I can't find any consistent documentation for assistanc...
Dear Community,We are using AnyConnect version 4.XX.XXWe plan to upgrade from old current version to new Secure Client.There are four latest version of Secure client version ( 5.0.04032, 5.0.03076, 5.0.03072, 5.0.02075 ).Please kindly recommend which...
Resolved! Security commands in Linux systems
good morning communityWell I was looking for different commands to quickly view who has been logged to a device.I saw 2 curious commands: who mum likes and who mum hates, I tried to find additional information for the last one but there is nothing cl...
