cisco Amp pc3000 not detecting malware using local protect DB in standalone connected mode. --> Verified the protect DB and it shows present.--> Using default audit policy with file audit option-->tested malware by downloading EICAR fileeicar_com.zip...
Forum Posts
Hello Has anyone tested the Caldera tool with version 3.0.2 of AMP4E(Private Cloud) ?How's the protected ability on AMP4E?CALDERA is an Adversary Emulation tool.
Hi, We are seeing lot of issues coming from windows devices - 100% CPU utilization by AMP. what are the primary steps we have to take to control the CPU usage. what we doing in this cases are- We are checking the connector versions(if it a old we are...
Hello all,please may somebody advice me regarding ASA licensing?I have 2 ASA with base licenses and firepower module and I want to install licenses for Threat protection, URL Filter, Email Spam Protection, malware protection, botnet prevention. I hav...
Hi Everyone, I have two Physical appliance for AMP Private Cloud.i.e AMP-PC-3000.I recently got to know that AMP Private Cloud does not support HA. So can anyone suggest how i can utilize both the appliances. Since customer bought two appliances i mu...
Hi guys,I m confused whether we can configure 2 Cisco AMP PC 3000 applince in HA. Since there is no document i could find on the internet. Can someone help me in this or any document which claims from cisco.
Hi, For some reason, if I download the app from the Play Store and try to register it using the activation code created from our dashboard does not work. We got the following error: "The code you provided appears to be invalid. Try again or contact s...
Hi, Is there any way to avoid unmanaged endpoints to continue consuming licenses? Kind of blacklisting the device or similar?Former employees' laptops no longer managed by my organization still connecting to the cloud and consuming licenses. Regards.
Does the macOS Connector only operate in an Offline mode? Device Trajectory has very minimal to almost no information compared to a Windows Connector. Also, scans executed by the AMP Console don't seem to actually occur and local scans never appear i...
Intel just released a vulnerability notice, link belowhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00313.html Noticed that Cisco Nexus Switch 9300 series and 7000 series use Intel CPU. Is it affected by Intel vulnerabili...
Today I had 6 endpoints within 3 hours all quarantine the following file: 8d4fdcb52b32afbcef4450ca88668def9b245a6f7ab2aa26ec3a4324a0b1f461When I look what was happening with each endpoint in AMP's Device Trajectory I see this:The event only indicate...
Hi Team, We need to cluster couple of Cisco Threatgrid appliance and need to know if we have any recommendations/tool for sizing NFS for the cluster.
Is it possible to export of list of just policy names? If not names only then an export of something that contains them that I can put into a CSV perhaps? I need to create some documentation and that would come in handy.
Currently downloading Firefox 70.0 from https://www.mozilla.org/en-US/firefox/download/thanks/ is being marked in Cisco AMP for Endpoints as malicious.
I do some light sysadmin stuff for my wife's school and they had a BE4000 installed last year. The people who configured it didn't talk to the network people and configured it with static IP information. Well, our firewall changed and now it can't re...
