Endpoint Security

currently, we are using compliance module 4.3.1728.6145 and anyconnect  version 4.9.06037 we are observing that the USB real-time block is not working. previously it was working and then it stopped. could it be related to the windows patch. how can w...

Hello,  Last week I rolled out version 7.4.3.20630 from 7.4.1.20439. After the update, it could be few hours, a day or week later, users start experiencing freezing, slowness, system hangs. Right away I knew what was causing it.  Windows Security Cen...

Hi,  Can we install AMP side by side with other AV product ? some users may still use their existing AV license while testing AMP RegardsBudi

Hi Communcity,we have around 14 MacOS with M1 processor that show a fault during the installation of AMP connector.This is because the MDM profile at https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/216089-advisory-for-amp-for-endpoi...

Especially, a longer reporting period than 2 weeks.

After a running running a full scan we still received email from Cisco AMP the computer is infected.... how i can remove it... Event Type: Threat DetectedComputer: CDCMKTGHJPCL63Hostname: CDCMKTGHJPCL63IP: 192.168.1.186, 10.101.214.190Detection: JS:A...

Can exploit prevention script control distinguish between a user initiated powershell script and one that is externally initiated such as a group policy?  I am creating a scheduled task to run on endpoints after group policy has a chance to synchroni...

Good day, I'm not able to find a concrete answer for the following question: When configuring a policy for CITRIX servers, is persistence required if Vdisk is being used? Kind regards.

Hi, is there any difference for AMP between a normal endpoint like a Laptop and a VM with Citrix Agents streaming Apps or Desktops?ThanksBenjamin

Cisco ISE/SecurityCenter Integration Credentialed ScansHello, We have followed this guide and gotten automated scanning of systems to work:https://community.cisco.com/t5/security-documents/cisco-tc-nac-with-ise-and-tenable-security-center/ta-p/364754...

Hello guys,Do you know if it is possible to exclude a file from Exploit Prevention engine? I havent found anything like that in the AMP console.  If this is not possible, is it on the roadmap?Thanks Marcel