Endpoint Security

Can we fetch vulnerability details with Cisco AMP using Orbital feature. If so can someone please let me know if there is any inbuilt query or we have to create customize queries for fetching this information for all applicable endpoints. If there is...

In traditional AV you would add an exclusion so that it would not be checked, however you would still have this exclusion scanned on a scheduled scan Does this apply to AMP4E or will the exclusion be ignored during the full scan too

When installing version 7.1.5 of the AMP agent to test isolation in the documentation, it appears that it is only supported for computers with x64 bits. Could you inform me if cisco is thinking of developing it in next versions support for 32 bit equ...

I am trying to configure one weekly summary report of AMP for Endpoints , where i did not have option  to send that report to distribution email address. ( example SecurityIT@domain.com) , where i see that i can receive on my own email address( xyzna...

Hi,I'm trying to set up a script whereby I can access one of our switches using SSH. I'm currently trying this from the CLI of  my PC but getting the following:C:\Users\<user>>ssh <switch> -l <username> -oHostKeyAlgorithms=+ssh-dss,ssh-rsa -oKexAlgor...

Hi Team, we are blocked file where we considered as malicious, that file resides in machine is there any way to pull out via cisco console itself. or any script can used to delete from those machines? Regards,Pruthvi

Hello,What DB are local accounts are located in? What algorithm are passwords encrypted by?

We have the policy to automatically isolate machines.So what is the next best practice action to take before stopping the machine from Isolation? 

Hi guys, Do any of you know of a way to set the update policy to always follow the latest version? This would be very handy for groups of product testers, IT engineers and other select groups whom test the latest built before it gets generally rolled...

Hello,If AMP connector loses connection to Private Cloud Server it will not get new policy settings. But after Cache TTL time it resets old policy settings at all and doesn't quarantine files from Simple Custom Detection anymore. I'm wondering why ol...

Currently We have deployed FireAMP Private Cloud. Software and Content Ver is 3.1.1) Why Quarantine is Failed for following files , Desktop is Windows 7. Connector is Protect Detection -                                                         File ty...

Hello,Apparently for AMP Private Cloud v.3.0.2 GUI's session timeout is 30 minutes. Is it possible to decrease timeout? How many login failed attempts are needed to block an account? Is there a configuration file to manage these parameters?

Hello,Where are logs of AMP Private Cloud v.3.0.2 located in a file system? There are log files only in directory /var/log/messages, but how to find logs from GUI in the tab Accounts->Audit Log?