We are currently in progress of testing Cisco Endpoint for a migration from another service. Our previous endpoint protection gave us the ability to pause or disable protection from the system trey. Does CSE have this functionally?
Hello, We have a .lnk file being pushed out by GPO that AMP has been blocking. AMP has been flagging it as Heur.BZC.ONG.Boxter.331.47822C71 and quarantining it.I have been whitelisting it but noticed that in AMP the .lnk file has a different SHA name...
Hi I am trying to move large number of endpoints from a audit policy that I have setup to a protect policy that I have created. I want to be able to write a python script and use Cisco Secure X orchestration to automate the function. Can anyone advis...
Hi everyone I'm trying to understand the "DAI" dynamic address inspection. The first functions of the DAI I understood those that make a check with the help of the dhcp spooning. Right after she says: """"DAI can be configured to check for both desti...
In a new advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444), Microsoft mentions (normal, their product) that Microsoft Defender... provide detection and protections for the known vulnerability. Also... alerts will be disp...
AMP4E gurus, App whitelisting allows only pre-approved and specified programs to run. Any other program not whitelisted is blocked by default.Is this doable in AMP4E?Or it would scan new apps and allow if clean ?!
Looks like we have have another FP... Reported to Talos, and opened a TAC case... we'll see who clears it up first... Detection: W32.1DC5CC50C1.MPOKE.RET.SBX.TGFile: notification_helper.exeFile path: \\?\C:\Program Files (x86)\Google\Chrome\Temp\sou...
Hello Cisco team. the following file has been marked as malicious. Am yet to open a TAC case. We believe that it may be a false positive. The most recent commit was pushed to Github at 01/09/2021, 23:32:19 https://marketplace.visualstudio.com/items?i...
I have several Windows laptops that started to have problems with Chrome after installing AMP.This happens occasionally and only with Windows machines.Chrome will not launch at all and if AMP is uninstall Chrome resumes working properly.I tried unins...
tHow does Threat Grid operate once an organization exceeds its submission rate limits? Does it ignore / no longer inspect files at that point until the 24 hour rolling window resets?
