Hoping the community can assist with SM issue during a proof of concept testing stage to troubleshoot the following.Windows 10/11Single SM Security policy with Desktop "Screen lock after" X minutes enabled set for 20minsAgent ver 4.1.1 (same experien...
Forum Posts
Hello friends.I'm working on setting up ISE on Azure for our org. we have combination of domain joined windows clients, IP phones and iPads (Apple products). I have two questions to start the process.1- does ISE Essentials License support Apple produ...
Hi, The File Detection category generates a lot of alerts on browser cache with signatures like these:GT:JS.Hyena.xGT:JS.Injected.xTrojan.Generic.xTrojan.GenericKD.xAuto.x.in02W32.x.in12.TalosMost of the time these files are unique so they won't be o...
I am new to cisco endpoint and will need some help in creating rolling 3 months analysis for end point positive detectionsand also analysis for false positive detection.Any help and directions will be deeply appriciated.Thanks
We have taken over IT Support for a school, and they have 32 iPads and seemingly a user for each year group (so 6 users). When they sign into the iPads, it isn't signed into MS Word or MS Sharepoint automatically and the teachers would like the stude...
Resolved! Sockets
John McClane found Safe Mode for Android and iOS. He removed the banking app. He is dedicating himself to his maximum security rack, a long-time dream. Proxies are active on smartphones for now. He needs connectivity today. But his money is under the...
Good morning,In the company I work for, we have several Android mobile devices, totalling 60 units. Not all of them need the same configuration, so I have created two profiles. The issue arises when enrolling a device, as it automatically adds to the...
We're having trouble running Office 365, is there application blocking where files can't be opened, is there any fix or policy enforcement to get it back up and running? Logs: (22455125, +0 ms) Jan 03 14:46:13 [7440]: ERROR: Event::SlowProcessor unab...
I have users that will be using a supervised iPad to take photos, and they will be transferring them to their desktop through USB. Live Photos are enabled by default, and they show up in the DCIM directory of the iPad as a .MOV file for each photo.My...
Good morning! We're currently facing the challenge of isolating our Linux systems (running Ubuntu and Debian) from the Cisco Secure Endpoint console (formerly known as AMP). Despite our efforts, we haven't been able to find a direct method to achieve...
Still running 2008R2 DCs believe it or not and they're running DPS v5.7.1. Does anyone know the URL to download legacy versions of DPS?Thanks in advance.
Resolved! False positive? GT:JS.Hyena.3 detections
Last night we started getting GT:JS.Hyena.3.x detections on a number of computers. We are continuing to receive them, over 150 machines so far. Anyone else seeing this?
Hello TALOSSince the retirement of Immunet at the beginning of 2024, has maintenance of Clam AV CVD signature files by Cisco TALOS been impacted? Are the Clam AV community signature sets still being actively maintained by Cisco? Thanks in advance
We have an end user machine that was placed into isolation after a high severity Cloud IOC Event (Cloud IOC: W32.PowershellIEXReplace.ioc) and a low severity Cloud IOC Event (Cloud IOC: W32.PowershellObfuscationAttempt.ioc) was detected. Powershell ...
Resolved! Multiple Secure Endpoint Alerts
Hi, in the last few hours our Secure Endpoint has alerted to hundreds of events associated with "Gen:Variant.Jatommy.3.3433". While the files are being quarantined in most cases, i believe this may be a false positive, is anyone else seeing these ale...
