Hello all! Im trying to extract more than 1 month ago events (.csv) from AMP for Endpoints, but without success. Is it possible to get this info? Be
Forum Posts
Hello All, i am using Amp connector version as : 7.1.5.11523 and operating system : windows 10 , where i am seeing some events as below on few machines , what actually it was referring to and how to resolve it
Hi all In our deployment we do not have any policy containing scheduled scans. However, looking in the dashboard/events/scan started with a 30 day timeframe, I can see that approx 5% of the endpoint have started a scan. Does AMP4E have auto scans? if...
We have a ISE cluster with version 2.3.298 We config a ANC policy to quarantine the PC . we find this policy work fine when windows PC ( wired and wireless) and MAC PC( only wireless) when MAC PC connect wired to the switch ,the policy take effect,bu...
a) What is Sandbox scans of network shares in Cisco AMP for Endpoints and do we have any feature related to this? b) Can we integrate FortiSandbox with Cisco AMP for Endpoints
Hello everyone, Can someone shed some light in this question? If I have a projetct that is going to have AMP for Endopoins and AnyConnect posture with ISE, should I consider using AMP Enabler Module? Do they complement each other or they perform the...
I am new to AMP, in fact we are in the very beginning stages of implementation. We are confused and thought it would be a good idea to reach out to the community. What is the relationship between Groups and Connectors? It seems very odd that we ha...
Hi everyone, I've been scratching my head with this issue, thus reaching out for help. I have a 3560G running 2.2(58)SE2 and I want to configure dot1x. Here is the config: aaa new-modelaaa group server radius myradiusaaa group server tacacs+ myta...
Resolved! Device Computer name change
Couple of issues encountered with AMP. Had a computer that has disappeared from Computer Management. When I have checked in the audit log AMP has changed the computer for reasons unknown to another computer which already had AMP installed for no obvi...
Resolved! AMP Endpoint Isolation
Been a user of AMP for sometime but installed and left to do its own thing for quite a while. Been focusing in recent weeks updating connectors and reviewing settings and came across a question couldn't find the answer to and thats how to Isolate a C...
Hi Team, Please confirm if AMP Private Cloud Virtual Appliance supports vmotion. RegardsRajesh
Hi, I'm making my first deployment of AMP for Endpoints and my boss asked me is there was a way to see usernames using AD instead of endpoint name in the console, my guess is no since it's evaluating an endpoint not a user but still, need to confirm ...
What is the delay in application vulnerabilities being announced and those CVE IDs being added to AMP4E dashboard? Then my understanding is the next time the file/application is copied, moved, or executed the vulnerability will be identified, correct...
Hello everyone, I am having some issues with my dot1x configuration and was hoping to get some ideas on what the issue might be.... End points are configured with windows supplicant software, Cisco 9300 working as authenticator and Cisco ISE as authe...
Hello, I have a problem with spam mails. I have identified the malware (tofsee). I search it in amp console and it shows some files. When I search one of them in the section Network Activity -> TCP/IP Streams I see an IP address as a source. What is...
