Endpoint Security

Hi I want to install endpoint IOCs and scan all the computers in my company but I found only one way to meet myneeds. The method needs to enter the account and password to install a schedule scan.Does anyone knows another way to run a endpoint IOC wi...

Hello,After upgrading to Private Cloud 3.1.2 API Server became unavailable. datateam-api's log saysERROR com.cisco.amp.data.api.APIServer - Failed to start API server.com.datastax.driver.core.exceptions.NoHostAvailableException: All host(s) tried for...

Can we fetch vulnerability details with Cisco AMP using Orbital feature. If so can someone please let me know if there is any inbuilt query or we have to create customize queries for fetching this information for all applicable endpoints. If there is...

In traditional AV you would add an exclusion so that it would not be checked, however you would still have this exclusion scanned on a scheduled scan Does this apply to AMP4E or will the exclusion be ignored during the full scan too

When installing version 7.1.5 of the AMP agent to test isolation in the documentation, it appears that it is only supported for computers with x64 bits. Could you inform me if cisco is thinking of developing it in next versions support for 32 bit equ...

I am trying to configure one weekly summary report of AMP for Endpoints , where i did not have option  to send that report to distribution email address. ( example SecurityIT@domain.com) , where i see that i can receive on my own email address( xyzna...

Hi,I'm trying to set up a script whereby I can access one of our switches using SSH. I'm currently trying this from the CLI of  my PC but getting the following:C:\Users\<user>>ssh <switch> -l <username> -oHostKeyAlgorithms=+ssh-dss,ssh-rsa -oKexAlgor...

Hi Team, we are blocked file where we considered as malicious, that file resides in machine is there any way to pull out via cisco console itself. or any script can used to delete from those machines? Regards,Pruthvi

Hello,What DB are local accounts are located in? What algorithm are passwords encrypted by?

We have the policy to automatically isolate machines.So what is the next best practice action to take before stopping the machine from Isolation? 

Hi guys, Do any of you know of a way to set the update policy to always follow the latest version? This would be very handy for groups of product testers, IT engineers and other select groups whom test the latest built before it gets generally rolled...

Hello,If AMP connector loses connection to Private Cloud Server it will not get new policy settings. But after Cache TTL time it resets old policy settings at all and doesn't quarantine files from Simple Custom Detection anymore. I'm wondering why ol...