As the title says, I am having problems excluding a custom application from being scanned. I have added the file path with a wild card (*) as well as the .exe file location (just for testing) without success. Once the application is installed it i...
Endpoint Security
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- Technology and Support
- Security
- Endpoint Security
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Labels
-
AMP for Email
(13) -
AMP for Endpoints
(837) -
AMP for Web
(19) -
Buying Recommendation
(4) -
Cisco Bugs
(1) -
Cisco Cafe
(1) -
Cisco Vulnerability Management
(7) -
Collaboration Endpoints
(1) -
Community Feedback Forum
(1) -
Community Ideas
(1) -
Endpoint Security
(555) -
Event Analysis
(1) -
General
(1) -
Identity Services Engine (ISE)
(2) -
Integrations
(1) -
Meraki Systems Manager
(882) -
NGFW Firewalls
(1) -
NGIPS
(1) -
Orbital Advanced Search
(26) -
Other AMP Topics
(156) -
Other NAC
(1) -
Other Network Security Topics
(1) -
Other Security Topics
(1) -
Policy and Access
(1) -
Prioritization
(1) -
Room Endpoints
(1) -
Secure Endpoint
(1) -
Vulnerability Management
(9) -
Wireless
(1)
- « Previous
- Next »
Forum Posts
I'm getting this email notification, but I don't know if this is just a notification or if the network is in danger. here is what the exact email says. [1:40268:1] "MALWARE-CNC Osx.Trojan.Keydnap variant dropper detected" [Impact: Vulnerable] From "x...
If i am running fireamp client with other antivirus software, I should create exclusions in fireamp console. Configuration of fireamp is mentioned here http://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118341-configure-...
We have just installed AMP for endpoints on all of our workstations. We now seem to be getting a lot of complaints about slowness, when I go into Task Manager on there PCs the process (sfc.exe) is a lot of times consuming their CPU. I checked too s...
In this Cisco Security Chalk Talks video Imran Bashir, Cisco Technical Marketing Engineer, introduces Cisco Identity Services Engine (ISE) Threat-Centric NAC service and its integration with Advance Malware Protection (AMP) and Qualys. This integrati...
Hello, I have an AMP for Endpoints deployment and I am having a difficult time tracking down documentation that explains the meaning of the events that are generated in the management console. Specifically I am seeing "Quarantine: Failed" and also "...
getting tons of Malware detection on the same file on same client. Detected W32.817749988C-95.SBX.TG as dwh3026.docm(8177499..a2b605)[PE Executable] . Created by ccSvcHst.exe, Symantec Security Technologies 10.2.1.2 (0b3fe2f..eae844)[PE Executable] ...
We have couple of MAC's with tons of malware E-mails in their Outlook. FireAMP detects this, but is unable to delete or quarentine the malware. we get this: The file was not quarantined. Error: Cannot delete file. I'm thinking that this looks like a...
Resolved! Cisco ASA5515-x firesight firepower
Hi Experts, I have an ASA5515 with AMP builtin as a software. I need to know what is the difference between the following file policy actions: Cloud Malware Lookup Block Malwares I know that in Cloud Malware Lookup, the ASA will calculate the Has...
Greetings!Please help ,as how should we position AMP & CTA together to any customer which could generate their interest on both (how utilizing CTA with AMP can further enhance their security), like anything which AMP missed is caught by CTA.
Hello,I have a partner that is asking me to detail the feature differences between AMP for endpoints vs the OpenDNS roaming client. Can someone point me to a feature matrix that illustrates how/when a customer should be using one vs. the other?Thank...
Resolved! Malicious file found, but what is it?
AMP for endpoint found this W32.39C4C54D7D-100.SBX.VIOC in a file named Chrome.exe. Where can I go that will tell me what that malware is? Thanks!
During a trial, the customer has accidently deleted the default protect policy. How can this be restored? so it will be seen during a quick start. I know you can make your own policies, but even then how can this be attached to the defaults.
Is there a way with either a Simple or Advanced Custom detection to stop a browser extension install or to remove/detect an existing one? Can you configure an IOC scan to Quarantine a file?
Hi I have a hard time finding information regarding this. What kind of protection provided by only Cisco AMP for networks if we do not have Cisco AMP for endpoints. How it will track file trajectory without AMP for endpoint ? is there any document ...
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
Unanswered Topics
| Subject | Author | Posted |
|---|---|---|
| 04-20-2026 08:04 AM | ||
| 04-20-2026 04:37 AM | ||
| 03-26-2026 01:13 AM | ||
| 09-15-2025 11:10 PM | ||
| 08-07-2025 11:30 PM |
New solutions