Endpoint Security

Hellowe have an AMP private cloud deployment with 6.x connectors and are migrating to secure endpoit cloud. Is there any disk or memory usage value to say that is a normal behaviour? or reaching any particular value for the "secure endpoint" process ...

Hi, What is the current status of securing ARM-based systems with AMP Endpoint security? I've seen some old threads were it was asked and requested as new feature. But I don't find any official statement (or ideally, roadmap) on this topic.   Regards...

Hi!We have 2 on-prem cloud infrastructures running kubernetes/rancher at the moment for dev and test, but the prod is coming along fast and we ran into the following problem:the infrastructures consists of the following nodes:1 "control" node3 "maste...

Hello, Does anybody know what is  JS.Heur.Phishing.3.7AB62CB8.Gen Secure endpoint detections?   Tried looking here https://talosintelligence.com/secure-endpoint-namingdidn't find anything. 

Hi all, We are having an issue with verifying the subscription status of Adobe Acrobat when opening PDFs in protected mode from Outlook, with AMP disabled it works. Opening PDF documents from explorer och any other application with AMP enabled works ...

I run an open source project, and I recently had a user contact me to let me know that Cisco Security Endpoint is detecting the JS:Trojan.Cryxos.8744 trojan on my website. I've scoured the site/server with numerous CLI virus and malware scanners, as ...

A while back in version 6.2.5 Secure Endpoint there was a issue with BSOD caused by immunetprotect.sysA client needed server patching done a few days ago 14/1/22 and didnt have any AV present on the server. Tech who was performing patching installed ...

Any tools to fully remove Cisco AMP? The agent is unable to connect to the console and the password doesn't appear to work. Attempting to remove from Programs and Features crashes the uninstall process.  Attempted using: FireAMPSetup_v####.exe /R /S ...

Just about every service start command is being flagged as an IOC right now. I've gotten around 30 or 40 alerts in the last hour for normal service starting behavior, some examples: C:\Windows\system32\svchost.exe -k localService -p -s RemoteRegistry...

Hey all,  are you seeing an FP on svchost.exe?  Mostly Cloud.IOCs... Ken

Hi Cisco Community,I'm currently unable to delete connectors from the console (old, inactive, etc.). The console states the connectors have been deleted, however they are not. I have double checked my permissions to verify I'm still an admin, but I'm...

Hi all, A user is reporting that every time they try to work on a specific CSV file Secure Endpoint is shutting excel down. In the device trajectory i am getting the below info:An attack was prevented in Script Control:wbemdisp.dll at base address 0x...