Hi All,I checked Cisco ISE and noticed that one of our Posture Policy is disabled. Can I check the logs of the ISE to check when the Policy was disabled? I tried looking online but was unable to get a concrete answer. If possible, can you also provid...
We are currently in progress of testing Cisco Endpoint for a migration from another service. Our previous endpoint protection gave us the ability to pause or disable protection from the system trey. Does CSE have this functionally?
Hello, We have a .lnk file being pushed out by GPO that AMP has been blocking. AMP has been flagging it as Heur.BZC.ONG.Boxter.331.47822C71 and quarantining it.I have been whitelisting it but noticed that in AMP the .lnk file has a different SHA name...
Hi I am trying to move large number of endpoints from a audit policy that I have setup to a protect policy that I have created. I want to be able to write a python script and use Cisco Secure X orchestration to automate the function. Can anyone advis...
Hi everyone I'm trying to understand the "DAI" dynamic address inspection. The first functions of the DAI I understood those that make a check with the help of the dhcp spooning. Right after she says: """"DAI can be configured to check for both desti...
In a new advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444), Microsoft mentions (normal, their product) that Microsoft Defender... provide detection and protections for the known vulnerability. Also... alerts will be disp...
AMP4E gurus, App whitelisting allows only pre-approved and specified programs to run. Any other program not whitelisted is blocked by default.Is this doable in AMP4E?Or it would scan new apps and allow if clean ?!
Looks like we have have another FP... Reported to Talos, and opened a TAC case... we'll see who clears it up first... Detection: W32.1DC5CC50C1.MPOKE.RET.SBX.TGFile: notification_helper.exeFile path: \\?\C:\Program Files (x86)\Google\Chrome\Temp\sou...
Hello Cisco team. the following file has been marked as malicious. Am yet to open a TAC case. We believe that it may be a false positive. The most recent commit was pushed to Github at 01/09/2021, 23:32:19 https://marketplace.visualstudio.com/items?i...
