We recently attended a "test drive" class for Cisco AMP where they mentioned that AMP was approved by Microsoft as a 3rd party AV client that should disable windows defender. I've linked the KB below. We have several test machines with AMP deployed t...
Forum Posts
When setting the conviction modes in the policy settings of a computer. Is there a guide on how each one affects performance of a computer? That way we know when turn them from disabled -> audit -> protect that it will have an impact on performance?
Buenos días, un placer saludarles,El presente contacto tiene como finalidad solicitarle las excepciones del antivirus para webex y webex meeting ya que el mismo realiza un analisis afectando el rendimiento de la memoria RAM de los equipos.Gracias.
Resolved! PPPC payload flow
Hi there,I'd like to know if PPPC payload/profile is deployed first and the application that PPPC configures for is installed after the profile is deployed, if it still allows the privacy permissions or does the PPPC payload have to be pushed after t...
I created Cisco AMP for endpoints free trial version. I got a confirmation mail, but I did not get any account activation mail as mentioned in the guide https://www.cisco.com/c/en/us/products/collateral/security/amp-for-endpoints/guide-c07-744325.htm...
Resolved! Secure Client Umbrella Configuration
I have been running Secure Client for a week, and I got a notification that I don't currently have an Umbrella profile installed. I cannot figure out how you would create one though. I see a place to import a configuration, but I've poked around the ...
Does this mean Anyconnect and Secure Endpoint (AMP) are being combined into a single agent? Will this mean the removal of existing agents (Umbrella/Any Connect, AMP) and the installation of a single agent which provides all of these?
Hi,Quarantine failed events were triggered for the user. Error details for the events are shown below:Error Code3221225539DescriptionUnknown ErrorCan anyone please explain the meaning of the error?
Has anyone been able to integrate all the logs produced from Systems Manger to be pushed into Splunk or something similar. Any help or being pointed into the right direction would be greatly appreciated.Thanks
Resolved! Meraki failing to clear passcode on iPad
An iPad with iOS 15.6 accidently had a passcode set when a user picked it up after an iOS update. The Clear Passcode command is not working with the following message in the Activity Log: Code: 5013Domain: MCPasscodeErrorDomainError: The passcode can...
I've searched and read documentation and cannot get a clear answer.I see these exclusions in Cisco Secure Endpoint:ThreatPathFile ExtensionWildcardExecutableProcess:File ScanMalicious ActivitySystem ProcessBehavioral Protection When creating exclusio...
I just noticed that the page for Microsoft Endpoint Vulnerabilities has recommended fixes but the "exposed devices" are actually with the updated recommendations done already. I try to report inaccurary but it says "failed to send feedback" and when ...
Cisco has chosen to once again change the graphic icon for Secure Endpoint in the latest version (8.0). The new icon looks similar to Anyconnect but with different colors. They also made the GUI look exactly like Anyconnect's GUI. If those two things...
Dear Cisco,We've upgraded a test fleet of Windows devices to Cisco Secure Endpoint 8.0.1 (from version 7.5.5). We noticed on every device that after the upgrade the GUI is opened automatically.Is there a way to prevent the GUI from opening? All prior...
Dear Cisco,We've upgraded a test fleet of Windows devices to Cisco Secure Endpoint 8.0.1 (from version 7.5.5). We noticed on every device that after the upgrade the debug logging has been (automatically) activated in the client. We have to stop it ma...