Cisco Secure Endpoint flags Lsass dump as Cloud IOC. EDR tool did not stop the dump, most likely because Windows native tools were used. I have ticketing in place to alert on the event. Does anybody know how do I blacklist the activity(command line i...
Hello. I have a bunch of VMWare hosted servers that AMP is hogging memory on. Most noticeably, it's really hogging it up on several servers that have 4GB of memory, to the point where I get constant Nagios alerts about memory usage. Previous, I could...
My iPhone is enrolled in MDM dashboard, and I have the SM app. If I take a picture with my iPhone, and selecting the email option, I'm able to select my Gmail, and non MDM associated emails. The work email, associated with MDM is not displaying. Anyo...
Hi,In response to a security incident, I would like to query one group of endpoints in AMP (Secure Endpoint) for network connections to a specific IP address. How can I do that in Orbital?Thanks for your time.Have a great day.T
Hello,Does the MDM offer an automated solution for iOS updates? Something that can be scheduled to push out? We have about 15 iPads over three locations and two different states. We can absolutely work with the option of doing it manually, but it wou...
Hi there,I'd like to know if there is functionality that automatically tags devices that have been enrolled into Meraki via DEP or can be created, customized to indicate a DEP enrolled device vs a manually enrolled device?
I've done some hunting on the internet but can't find the answer I'm looking for. I'm trying to remotely configure user accounts via pkg deployments and was wondering how to add items to a local users "Login Items". I'm thinking it has to be done usi...
On 6/28 and 6/29 I received a large uptick in old PDF docs getting quarantined as PDF.Spam.Heur5. In all cases, these pdf files have been on these workstations for two or more years. Anyone else seeing this? False positives, or better late than ne...
Hi there,We seem to be having an issue on multiple devices. That when an app is uninstalled it still shows as installed on the device. Even though we are manually triggering the refresh apps list task.These devices are enrolled through DEP and have t...
Hi, I have seen this ISE reference for guest authentication & ISE: https://community.cisco.com/t5/security-documents/ise-guest-access-deployment-guide/ta-p/3640475 , but i am still unsure if wired guest users can be redirected to a Sponsor Captive...
Hi there,I'd like to know what are the use cases for having multiple networks to separate devices based on location/country/continent in an SD-WAN environment.My current view is that it's not necessary if the devices are to adopt identical configurat...
Hi, I have a number of files on Windows 10 that are showing as clean One is svchost.exe SHA256 5d00bbeb147e0c838a622fc42c543b2913d57eaca4e69d9a37ed61e98c819347 It is reporting as clean. However, the product name is Microsoft in Russian, which i...
I need to move all our iPhones/iPad MDM profiles in the company to a new Intune profile and remove the old MDM profile, for doing this, I am removing the old profile first and then taking a backup with iCloud and then restoring it to the factory sett...
Hi there,If we change a customized enrolment string of a network with users assigned to that network from that customized enrolment string. Would it interfere with the MDM on their devices?
Hi there,I'd like to know if anyone knows how to deploy Sophos Intercept X Advanced through Meraki MDM?Sophos comes in a zipped file containing:1. Sophos Installer.app (Setup)2. Sophos Installer Components (Folder containing setup config file)These t...
