Endpoint Security

We are rolling out AMP and have various processes and files flagged as malicious by the tool that are approved to use and we are OK with these items running on our endpoints. We have added the SHA values to Allowed Applications, but noticed the dashb...

Hi Team, My customer has some questions around the advanced security features within the SDWAN offering and how they are provisioned when ordered. Some questions highlighted were: If the DNA premier license is ordered my understanding is that an acc...

Hi Team. We have two categories of AMP services , one which is used as  firepower services and other one is AMP for endpoints/networks. Can anyone please throw some light on the differences between them and how exactly they work?

Hello, When I try to open Computer management (Manage)  I get the following errorbut "Computer Management" starts. In addition, when tried to execute “ipsupporttool.exe” located in C:\Program Files\Cisco\AMP\6.3.1(Current version of AMP running on th...

Hello everyone,Can anybody suggest me commands/remediation for ssh weak mac algorithm,SSH CBC mode ciphers enabled & NTP mode 6 vulnerabilities.Below is the version of IOS.Cisco IOS Software, C2960 Software (C2960-LANBASEK9-M), Version 15.0(2)SE9, RE...

We're currently piloting Cisco AMP in our primarily-macOS environment and I'd like to know if there's a way to hide the menubar icon at installation.I know it can be done for Windows but have been unable to find similar instructions for macOS...

Hi all,A couple of quick questions regarding identity persistence. When a computer is re-imaged and is not yet joined to our domain, will AMP still identify it using the MAC address and UUID to reinstall the endpoint connector? What about for remote ...

Any one can suggest me plz types of Licensing for Cisco Umbrella & AMP which i need to purchase (deploy in network for POC)

We have installed AMP Tetra engine on few 2003 servers with 5.1.13 connector yesterday evening, but these are not updating with AMP definitions. 

Hi,   Can someone provide me with the process to obtain an account for AMP for endpoints cosole  

Hello,  I have the below          The policy is quarantine, but the event says it does not block it. Any idea why? Thanks and regards, Konstantinos        

I'm trying to figure out an interesting case I have on hand. Our SF IPS-es running on 6.1.0.3 (build 57) are detecting this  CNC torpig bot  sinkhole server DNS lookup events coming from our Internal Barracuda ESGs. We had called Barracuda technical ...