Are there any issues to be found when running AMP for Endpoints on any virtual machines like High CPU Usage (>50%) or High Memory use? Our environment uses VMs extensively and we are having some instances of the CPU and/or Memory pegging out during S...
Hello guys,I have Tetra update server on windows server 2012 R2, I make the configuration as in the document When i try to open the web server it show me Service Unavailablewhat could be the problem?
Good afternoon friends ; Is there any cisco documentation on how to use the telnet protocol to access the equipment? Thank you so much.
As you can see in the image attached, the settings are disabled and I don't know what to do.What it can be?
We had a threat detected (malicious docx file) and AMP indicates it was quarantined successfully but the file remained in the original location. Shouldn't AMP be removing the file? How can I figure out why it was not removed? Also, this particular fi...
Hi Sirs: If I want to backup the AMP connector and Threat Grid Application database or event. What I can do for this ?Dose it has database ? Could you provide me any recommendation ?
Hi Experts, We are proposing AMP 4E for servers (linux and Windows). Customer will have private cloud AMP & TG installation at one site. And Serers with AMP connector at another site. These two sites will be connected by Site to site VPN. So basicall...
Hello, We have an issue with our AMP for Endpoint connectors since day 1. Either we choose not to ask for reboot when applying product update or not, it will asks us to reboot. This problem is occurring on all of our policies. Anyone having this ...
HiLooks like there's not much example of api scripts down there or on the net for those who are using Powershell except this topic which was very helpful : https://community.cisco.com/t5/advanced-threats/some-handy-tips-for-amp4e-api-connections-wit...
By reading the FirePOWER documentation and by looking at Cisco Live slides (see uploaded slide), it seems that files are submitted for dynamic analysis by the ASA-SFR directly for dynamic analysis. Could the files be submitted for dynamic analysis ...
So I have a user using excel with a macro/script and AMP keeps flagging VBA.ObfDldr.1.Gen How can I whitelist this file so it's not alerting 100x a day. The hash changes when they use the file.
Hello there, I am attempting to add a new user to one of our customer deployments lets call them "person@company.com", but it keeps telling me that email address is already in use. I know for a fact that this email is not in use on this deploym...
Hi Sir: Could you help me to confirm AMP4Endpoit detect the event of below scenario ?When client click the malicious website and download the malware. The malware will try to compromise the other computers at the same subnet. What kind of event tha...
Hi Community, I have loaded the IOC packet from the FireJumper and run a scan against my computer. The result is 24 matches of 171 IOCs. Now I want to understand why there are 24 matches and why these IOCs were found. Here a small excerpt of the fo...
Hey all, Calling all AMP experts - Looking for some help with an issue that has been driving me bananas. My client has a website in which they open with IE and it loads an activeX addon (which is installed on the computer and has a C++ component to...
