Hi team,Is it possible to send Cisco Endpoint security logs to Ubuntu syslog server via API ?We are planning to connect Cisco endpoint security logs to Azure Sentinel and its possible as per the document but it require server less - Azure function ( ...
Forum Posts
Since the tetra antivirus engine is a part of the AMP for endpoint, do we need an Anti-virus software from other vendor in addition the AMP-4-Endpoint?
We have a customer using MSSP for Endpoint Security. They want to manage their endpoints themselves. How can I migrate the endpoint to their own, self-managed, tenant?
We are working on implementing 802.1x with our 8851 ip phones. We have installed the LSC cert and enabled 802.1x on a few phones for testing. We are using Cisco ISE and the switch is configured for host mode multi domain. Everything seemed to be w...
I am trying to install our Secure Endpoint Connector silently and the only documentation I have found recommends the use of /s or /r /s depending on the version, 8.0 in our case.No matter which command line switch I try to use with amp_Protect.exe it...
Resolved! Secure Endpoint Initial Scan
Does anyone know if Secure Endpoint does any kind of initial scan of the computer after it is installed?
Hello,I would like to test the "automated actions" in which the computer is isolated at a "critical severity". What are the basic ways to test this? As an example I would like to test this IOC: JS.Trojan.Generic_48153.ioc "This IOC fires when a URI p...
Hi,I have updated Cisco Secure client to version 8.1.3.21242 on all endpoints Windows 10 without issues. But when I test update on two Windows 2019 servers, it installs fine but GUI is missing. I can see GUI and Secure Client service running in Task ...
Friend, could you help me with this case: update the Umbrella in all the stations and since this update there are DNS resolution problems through the VPN connection.
Hello Everyone The new CISCO AMP update 8.1 has many bugs and no GUI to work with when installed. Can we roll back to 7.5 from the AMP dashboard?
How can we delete Customers in Amp for Endpoint Console? We can only Disabled the customer but not delete.
Resolved! Full Scans
Does anyone run scheduled full scans on their endpoints at night? Are full scans tied to retrospective detections?
Hi All,Facing an Error while downloading connector and selecting groups. PFA and let me know how to resolve it.
I am trying to figure out how to block certain types of files from being created on the workstation using AMP. The example is I want to prevent a user from drag and dropping an email onto their local drive (.msg) file. I have been told I may be...
Is there a way to recover a file that was quarantined by AMP?When I try to retrieve the file I get an automated email, [Cisco Secure Endpoint] File upload failed with no further details.I do see a file in C:\Program Files\Cisco\AMP\Quarantine with ab...
