I am new to cisco endpoint and will need some help in creating rolling 3 months analysis for end point positive detectionsand also analysis for false positive detection.Any help and directions will be deeply appriciated.Thanks
Forum Posts
We have taken over IT Support for a school, and they have 32 iPads and seemingly a user for each year group (so 6 users). When they sign into the iPads, it isn't signed into MS Word or MS Sharepoint automatically and the teachers would like the stude...
Resolved! Sockets
John McClane found Safe Mode for Android and iOS. He removed the banking app. He is dedicating himself to his maximum security rack, a long-time dream. Proxies are active on smartphones for now. He needs connectivity today. But his money is under the...
Good morning,In the company I work for, we have several Android mobile devices, totalling 60 units. Not all of them need the same configuration, so I have created two profiles. The issue arises when enrolling a device, as it automatically adds to the...
We're having trouble running Office 365, is there application blocking where files can't be opened, is there any fix or policy enforcement to get it back up and running? Logs: (22455125, +0 ms) Jan 03 14:46:13 [7440]: ERROR: Event::SlowProcessor unab...
I have users that will be using a supervised iPad to take photos, and they will be transferring them to their desktop through USB. Live Photos are enabled by default, and they show up in the DCIM directory of the iPad as a .MOV file for each photo.My...
Good morning! We're currently facing the challenge of isolating our Linux systems (running Ubuntu and Debian) from the Cisco Secure Endpoint console (formerly known as AMP). Despite our efforts, we haven't been able to find a direct method to achieve...
Still running 2008R2 DCs believe it or not and they're running DPS v5.7.1. Does anyone know the URL to download legacy versions of DPS?Thanks in advance.
Resolved! False positive? GT:JS.Hyena.3 detections
Last night we started getting GT:JS.Hyena.3.x detections on a number of computers. We are continuing to receive them, over 150 machines so far. Anyone else seeing this?
Hello TALOSSince the retirement of Immunet at the beginning of 2024, has maintenance of Clam AV CVD signature files by Cisco TALOS been impacted? Are the Clam AV community signature sets still being actively maintained by Cisco? Thanks in advance
We have an end user machine that was placed into isolation after a high severity Cloud IOC Event (Cloud IOC: W32.PowershellIEXReplace.ioc) and a low severity Cloud IOC Event (Cloud IOC: W32.PowershellObfuscationAttempt.ioc) was detected. Powershell ...
Resolved! Multiple Secure Endpoint Alerts
Hi, in the last few hours our Secure Endpoint has alerted to hundreds of events associated with "Gen:Variant.Jatommy.3.3433". While the files are being quarantined in most cases, i believe this may be a false positive, is anyone else seeing these ale...
Hello,we've noticed a shift in the development direction of the official Secure Endpoint web interface, which is unfortunately becoming a challenge for us to work with on a daily basis. As a result, we're considering creating our own administration i...
I have multiple iPhones that, when I apply a profile, nothing seems to happen on the device. In MDM, the profile list does not update or change.I can see in the Activity log pending commands but, however long I wait, they never complete. I can only c...
According to support, only Windows Server 2022 is supported going forward in systems manager version 4.0 and higher.Can someone from Meraki comment on this decision? Server 2016 and 2019 are still fully supported operating systems by Microsoft. Even ...
