Hi, I am working to manage the amount of emails I get on a daily basis. We are managing multiple AMP deployments and tens of thousands of endpoints as a MSSP. As we continue to grow, we are needing to funnel these notifications into a central source....
Forum Posts
I believe this is the correct board for this question.We have an Cisco 2110 ASA Firepower. Version: 2.10(1.182). We are trying to update the SSL certificate in our ASA via CLI. When I enter the certificate and try to commit, I am getting this error:[...
Hello all,How can AMP for endpoint affect the performance due to file, process inspection ? Does it substantially decrease performance. My customer wants to have some insight about this.Best Regards,An
Hello,Hoping this is just an oversight on my part. Situation: An alert is triggered, so I begin by running a scan. The scan returns with detections. (Or returns with 2 Hidden Files).Question: How do I view these detections? How do I view the hid...
Resolved! Secure Endpoint in Windows Safe Mode
Hello, I am interested how does Secure Endpoint work in Windows Safe Mode? What engines are functioning (if they are functioning at all) and so on.. I could not find any documentation about it. Thanks
Hi,I want to clarify the settings inheritance between parent and child groups. Parent Group: Org Group1 Windows Policy: Base Windows Policy Mac Policy: Base Mac Policy .... Child Group: Finance Windows Policy: Finance Windows Policy Ma...
Hello All,Getting an Error "Kmode exception not handled" if i install Cisco amp to my windows server 2022. Pfa snapshot and help me how to resolve it
Is there a way to submit Linux file for virus analys within the Secure Endpoint Product? Today it looks like the only files and sandboxes/vm images for analys is Windows. If there is an other tools to use we would like to know since we are running Se...
Secure Endpoint classified BemReporter.exe SHA256: bbffca2256d58c47fec4cb62ff4cb3af2adf9ecb34eba8771dbf4daa90d99640 (C:\Program Files\HP\Sure Click\4.4.2.2945\servers\BemReporter.exe) disposition unknown which triggered a retrospective quarantine of ...
Hi all, I'm wondering if there is a way to turn off failed authorization logging in ISE? When someone leaves open a stale ASDM session our logs become flooded with failed Auth attempts. I'm guessing this is because the ASDM is trying to keep the rule...
Hi All, Is it possible to restrict or block any urls using amp ?. Like client wants to restrict windows update using amp install in user machine. Please advise.
Hello DearsWe are planning to impelment Cisco ISE with 802.1x and we have the following quiestions :1-is it possible to connect ISE with Microsoft AD so the login user for 802.1x is done with AD username/password?2-is 802.1x is working without issue ...
My ultimate goal is to have some form of CMD line logs sent into Splunk. Due to reasons, Sysmon or any other tool is not possible. We only have AMP logs being sent to Splunk. Currently we only get what CMD line arguments were used if there is a cloud...
Resolved! AMP integration with Secure X
HelloI am trying to integrate cisco secure X with AMP for end point and we have private clould for AMP, is this integration possible ? I only can see its available for AMP in public cloud.
We've had a handful of machines get flagged for the AMSI provider being deleted from the registry, and haven't been able to put a finger on the cause. The registry key being deleted looks like it's the one for Windows' built-in AV ( {2781761E-28E0-41...
