I have a Firepower 8350 that has been giving me and my colleagues a huge headache.The device is unreachable from FTD and I am trying to recover it from an .iso file. Is there a way to run a restore .iso from a Windows FTP server? I was able to get it...
Forum Posts
Hello, am new to the tool, am trying to find out which Engine from Cisco AMP is blocking the powershell.exe. we have a .vbs script which runs on every start up to set some printer preferences, which is failing obviously due to AMP and user could see ...
Hi Experts , We have same autherization policy for all the network switches , But for few devices our access is not working , When we check the logs , we are getting below error but with username : radius-keepalive ...(this is not the actual usernam...
Yesterday I created 3 new policies and groups. I moved the endpoints to the groups associated with the policies however the endpoints are not showing up under the new policies but they do show up under the group.The endpoints show policy is up to dat...
Hello AMP Team, Trying to understand the difference between AMP Exclusion and Application Whitelist. When we would add an application/path or other
Could you help me with issue we are facing? We use PatchMyPC-ScriptRunner.exe tool for automatic software deployment/checks and this tool is creating a records in the registry similar to: \MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image Fi...
Is there anyway to offset full scans without building out multiple policies?My one policy "Servers" runs a full scan at 9am, about 60 servers. This kills my ESX hosts. They are normally sitting around 15-20% CPU usage but during the scans they are pe...
Hellowe have an AMP private cloud deployment with 6.x connectors and are migrating to secure endpoit cloud. Is there any disk or memory usage value to say that is a normal behaviour? or reaching any particular value for the "secure endpoint" process ...
Hi, What is the current status of securing ARM-based systems with AMP Endpoint security? I've seen some old threads were it was asked and requested as new feature. But I don't find any official statement (or ideally, roadmap) on this topic. Regards...
Hi!We have 2 on-prem cloud infrastructures running kubernetes/rancher at the moment for dev and test, but the prod is coming along fast and we ran into the following problem:the infrastructures consists of the following nodes:1 "control" node3 "maste...
Resolved! Cisco AMP doesn't recognize new hostname
Hello everyone, I installed Cisco AMP in one of my servers and later on changed the hostname for that server. However, in Cisco AMP dashboard I am still seeing the old hostname. Does it take days to update this data, or do I need to do something manu...
I have created a policy for windows machines in which I have enabled DFC and configured the setting to 'Block'. I then configured a custom IP block list and entered a list of some IP addresses, and associated this block list to the above policy. When...
Hello, Does anybody know what is JS.Heur.Phishing.3.7AB62CB8.Gen Secure endpoint detections? Tried looking here https://talosintelligence.com/secure-endpoint-namingdidn't find anything.
Resolved! Alerts - Can I get some?
We have had AMP for about 6 months now and we don't get alerts for anything important.For "Announcement Preferences" I am subscribed to everything.- Critical Issues- Product Updates- Important Issues- InformationEvery now and then I get an email that...
Hi all, We are having an issue with verifying the subscription status of Adobe Acrobat when opening PDFs in protected mode from Outlook, with AMP disabled it works. Opening PDF documents from explorer och any other application with AMP enabled works ...
