Endpoint Security

Hi Team, We are working on a requirement of NGIPS and APT requirement and need clarification of these feature support in AMP for endpoints: Is the product capable of automatically collect and store forensic data locally on client for endpoint inciden...

Hi, I've recently had Sourcefire FireAMP connector installed on my Windows 10 PC, and have been curious if it has anything to do with a feeling of lag/slowdown I've had. One thing I've noticed, is the log at "C:\Program Files\Sourcefire\fireAMP\4.4.2...

Can anyone provide me the best practices to uninstall and install fireamp client through SCCM? Till now we have not got the issue where we need to uninstall and install through SCCM since we upgraded few machines from older version to 4.4.2.

We have the account set up as follows. Our Company purchased 70 licences, and we have sub-tenanted 50 of these to down stream ISP customer: 1. When I log in (with administrator privileges) I have the following option:> Analysis > Reports When our cus...

As the title  says, I am having problems excluding a custom application from being scanned.  I have added the file path with a wild card (*) as well as the .exe file location (just for testing) without success.  Once the application is installed it i...

If i am running fireamp client with other antivirus software, I should create exclusions in fireamp console. Configuration of fireamp is mentioned here http://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118341-configure-f...

We have just installed AMP for endpoints on all of our workstations.  We now seem to be getting a lot of complaints about slowness, when I go into Task Manager on there PCs the process (sfc.exe) is a lot of times consuming their CPU.  I checked too s...

In this Cisco Security Chalk Talks video Imran Bashir, Cisco Technical Marketing Engineer, introduces Cisco Identity Services Engine (ISE) Threat-Centric NAC service and its integration with Advance Malware Protection (AMP) and Qualys. This integrati...

Hello, I have an AMP for Endpoints deployment and I am having a difficult time tracking down documentation that explains the meaning of the events that are generated in the management console. Specifically I am seeing "Quarantine: Failed" and also "S...

getting tons of Malware detection on the same file on same client. Detected W32.817749988C-95.SBX.TG as dwh3026.docm(8177499..a2b605)[PE Executable] . Created by ccSvcHst.exe, Symantec Security Technologies 10.2.1.2 (0b3fe2f..eae844)[PE Executable] e...