Hi Experts, I have an ASA5515 with AMP builtin as a software. I need to know what is the difference between the following file policy actions: Cloud Malware Lookup Block Malwares I know that in Cloud Malware Lookup, the ASA will calculate the Hash-25...
Greetings!Please help ,as how should we position AMP & CTA together to any customer which could generate their interest on both (how utilizing CTA with AMP can further enhance their security), like anything which AMP missed is caught by CTA.
Hello,I have a partner that is asking me to detail the feature differences between AMP for endpoints vs the OpenDNS roaming client. Can someone point me to a feature matrix that illustrates how/when a customer should be using one vs. the other?Thank...
AMP for endpoint found this W32.39C4C54D7D-100.SBX.VIOC in a file named Chrome.exe. Where can I go that will tell me what that malware is? Thanks!
During a trial, the customer has accidently deleted the default protect policy. How can this be restored? so it will be seen during a quick start. I know you can make your own policies, but even then how can this be attached to the defaults.
Is there a way with either a Simple or Advanced Custom detection to stop a browser extension install or to remove/detect an existing one? Can you configure an IOC scan to Quarantine a file?
Hi I have a hard time finding information regarding this. What kind of protection provided by only Cisco AMP for networks if we do not have Cisco AMP for endpoints. How it will track file trajectory without AMP for endpoint ? is there any document t...
Hi Guys before i start, forgive me for this post, i just need to be pointed in the right direction. I have installed a ASA5506 at a client site for a POV, behind their edge firewall. The ASA is sitting on the network just monitoring traffic. It picke...
Hi, I´m interested in AMP and would like to understand better how it works. If there are documentations to my questions (that I didn´t found so far) it would be very kind, if you could send me the links. 1.) When we are talking about Firepower integr...
My company just received 02 new firewall ASA 5515-X with Firepower from the distributor. Because from the beginning the distributor did not know that the firepower need to be managed through a FirePower Defense Manager based on VMware ESXi then now I...
In our environment, we have an authenticated proxy. We created the exceptions the servers listed on the required server list document. The exception allow access to the websites without authenticating. However, the connectors were not connecting. Loo...
Hi all, I received a retrospective file alert: A xls-file on my network seems to be malicious now. Detection name: DOC.739FBB8CD4.MalMacro.tht.Talos However, virustotal marks this file as safe: Detection ratio: 0 / 56 Analysis date: 2016-06-09 08:26:...
Hey everyone, I apologize for the question but I'm still quite new to FirePOWER and am still learning the ropes when it comes to investigations. I received a few emails from FireSIGHT with the subject of "**Auto Generated Email** -- Network Based Ret...
Our client only wants to allow connections to the AMP update server and no other website or network.Could anyone provide the list of IPs it needs to connect to to get updates to signatures and patch updates?
Recently Cisco/SourceFire released a bulletin about a cloud migration for our SourceFire AMP clients and that we would need to update some policies to ensure our clients can talk to Cisco's cloud servers. I deployed the updated policy to one of our t...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 07-16-2026 11:13 PM | ||
| 04-20-2026 08:04 AM | ||
| 04-20-2026 04:37 AM | ||
| 03-26-2026 01:13 AM | ||
| 09-15-2025 11:10 PM |
