Endpoint Security

FireAMP deployment through SCCM

Can anyone provide me the best practices to uninstall and install fireamp client through SCCM? Till now we have not got the issue where we need to uninstall and install through SCCM since we upgraded few machines from older version to 4.4.2.

Resolved! ASA Firepower throughput

Hi Guys, I have noticed Palo Alto and other vendors specify a much higher throughput for their next generation solution compared to Cisco when they do the full URL filtering , anti virus and Spam protection I think this is because they process th...

AMP for Endpoints - subtenanting

We have the account set up as follows. Our Company purchased 70 licences, and we have sub-tenanted 50 of these to down stream ISP customer: 1. When I log in (with administrator privileges) I have the following option:> Analysis > Reports When our c...

Issues excluding a custom application from being scanned

As the title says, I am having problems excluding a custom application from being scanned. I have added the file path with a wild card (*) as well as the .exe file location (just for testing) without success. Once the application is installed it i...

Resolved! MALWARE-CNC Osx.Trojan.Keydnap variant dropper detected

I'm getting this email notification, but I don't know if this is just a notification or if the network is in danger. here is what the exact email says. [1:40268:1] "MALWARE-CNC Osx.Trojan.Keydnap variant dropper detected" [Impact: Vulnerable] From "x...

fireamp exclusion

If i am running fireamp client with other antivirus software, I should create exclusions in fireamp console. Configuration of fireamp is mentioned here http://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118341-configure-...

High CPU usage after install

We have just installed AMP for endpoints on all of our workstations. We now seem to be getting a lot of complaints about slowness, when I go into Task Manager on there PCs the process (sfc.exe) is a lot of times consuming their CPU. I checked too s...

Chalk Talk: Threat-Centric Network Access Control (NAC) with ISE 2.1

In this Cisco Security Chalk Talks video Imran Bashir, Cisco Technical Marketing Engineer, introduces Cisco Identity Services Engine (ISE) Threat-Centric NAC service and its integration with Advance Malware Protection (AMP) and Qualys. This integrati...

FireAMP/AMP for Endpoints Event details

Hello, I have an AMP for Endpoints deployment and I am having a difficult time tracking down documentation that explains the meaning of the events that are generated in the management console. Specifically I am seeing "Quarantine: Failed" and also "...

FireAMP and Symantec SEP competing over virus files

getting tons of Malware detection on the same file on same client. Detected W32.817749988C-95.SBX.TG as dwh3026.docm(8177499..a2b605)[PE Executable] . Created by ccSvcHst.exe, Symantec Security Technologies 10.2.1.2 (0b3fe2f..eae844)[PE Executable] ...

Resolved! FireAMP unable to delete outlook attachment on MAC's

We have couple of MAC's with tons of malware E-mails in their Outlook. FireAMP detects this, but is unable to delete or quarentine the malware. we get this: The file was not quarantined. Error: Cannot delete file. I'm thinking that this looks like a...

Resolved! Cisco ASA5515-x firesight firepower

Hi Experts, I have an ASA5515 with AMP builtin as a software. I need to know what is the difference between the following file policy actions: Cloud Malware LookupBlock Malwares I know that in Cloud Malware Lookup, the ASA will calculate the Hash-2...

Resolved! How should we position AMP & CTA together

Greetings!Please help ,as how should we position AMP & CTA together to any customer which could generate their interest on both (how utilizing CTA with AMP can further enhance their security), like anything which AMP missed is caught by CTA.

Resolved! AMP for endpoints vs. OpenDNS roaming client

Hello,I have a partner that is asking me to detail the feature differences between AMP for endpoints vs the OpenDNS roaming client. Can someone point me to a feature matrix that illustrates how/when a customer should be using one vs. the other?Thank...

Resolved! Malicious file found, but what is it?

AMP for endpoint found this W32.39C4C54D7D-100.SBX.VIOC in a file named Chrome.exe. Where can I go that will tell me what that malware is? Thanks!

Endpoint Security

Forum Posts

FireAMP deployment through SCCM

Resolved! ASA Firepower throughput

AMP for Endpoints - subtenanting

Issues excluding a custom application from being scanned

Resolved! MALWARE-CNC Osx.Trojan.Keydnap variant dropper detected

fireamp exclusion

High CPU usage after install

Chalk Talk: Threat-Centric Network Access Control (NAC) with ISE 2.1

FireAMP/AMP for Endpoints Event details

FireAMP and Symantec SEP competing over virus files

Resolved! FireAMP unable to delete outlook attachment on MAC's

Resolved! Cisco ASA5515-x firesight firepower

Resolved! How should we position AMP & CTA together

Resolved! AMP for endpoints vs. OpenDNS roaming client

Resolved! Malicious file found, but what is it?

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

cisco umbrella update

pda authentication timeout

Filter Last Seen = Within 1 Hour

Error 5400 and 22056 Cisco ISE

Scanning Events show up late.

Full Scans

Could not get a handle on the process's executable

How to upgrade OpenSSL on Cisco 2960

Connector Download detected as Gen:Variant.Symmi.84797

AMP - full scan through SecureX