Hi all and sorry if it's already been solved here.Can I use my Secure Endpoint solution ( Essentials plan) for getting lists of applications installed on endpoints? We're using Windows and Mac devices.Thanks in advance.
Can exploit prevention script control distinguish between a user initiated powershell script and one that is externally initiated such as a group policy? I am creating a scheduled task to run on endpoints after group policy has a chance to synchroni...
Good day, I'm not able to find a concrete answer for the following question: When configuring a policy for CITRIX servers, is persistence required if Vdisk is being used? Kind regards.
How do you upgrade Cisco Orbital nodes? This is in relation to Orbital node versions prior to 1.14.18 going End-of-Life as of August 4, 2021. I cannot find any documentation on Cisco orbital help page on how to upgrade.
Cisco ISE/SecurityCenter Integration Credentialed ScansHello, We have followed this guide and gotten automated scanning of systems to work:https://community.cisco.com/t5/security-documents/cisco-tc-nac-with-ise-and-tenable-security-center/ta-p/364754...
Hello guys,Do you know if it is possible to exclude a file from Exploit Prevention engine? I havent found anything like that in the AMP console. If this is not possible, is it on the roadmap?Thanks Marcel
I wonder if there is any support from Cisco Secure Endpoint (AMP4E) to counter, at least in some measure, these 'weeknesses'?How do we know there is some kind of active protection, until Microsoft comes-up with a real correction?Any alternatives (bes...
Hello I received this mail Secure Endpoint observed the following compromise matching your subscription named Real Time Incidents.Compromise StateRequires AttentionHostname Group Operating SystemWindows 10 EnterprisePolicy Connector Version7.3.15.201...
Getting a stack of DFC Threat Detected for an ip...205[.]185[.]216[.]42Its a CDN in Texas... Talos says it's bad... but its resolving to things like dl.delivery.mp.microsoft.com, etc.
Hi Experts,
We have a AMP Virtual Private cloud setup running on a VM with 2 NIC - one for the management and other for the AMP Console.
I understand that the management is majorly used for the initial setup and configuring management related tasks...
