Hello all, I'm under the impression that if installing the AMP connector on a Windows server, we should disable DFC and TETRA. Can anybody point me at an up-to-date document or web page that shows this recommendation? Many thanks in advance, Matt...
Hi I am working on some case where the customer asked me about the no. VM (for sandboxing) running on the Threat Grid firewall. I neither find it in the Admin guide nor in datasheet and any other portal. Could someone help me on this please? Regards...
So I am running security scans on our network for the first time. I have a long list of things to fix. One is the SSL/TLS suite another is upgrading the key to the diffie-hellman key exchange. I was hoping to get pointed in the right direction on how...
Hi Sir: My environment is below: 1.AMP Endpoint for MAC and windows 2. Private Cloud on Intranet When I find one suspect file (I think it's malware file.)but AMP endpoint can't analyze it. It think it's normally. What can I do for this file ? Can...
Hi, I am currently evaluating Rapid Threat Containment with Firepower Threat Defense and ISE. Does anyone if it's possible to add AMP for endpoints to this solution and have AMP to automatically scan a client that has been quarantined by Firepowe/I...
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND Hi I have AMP version - AMP for Endpoints Connector v1.9.1.603 Redhat release 7.4 And i have AMP processes being among top memory consumers. Are there any suggestions around...
Can a network share or a file on a network share be added to exclusions? If so, what is the syntax?I have an .exe on a share that I have whitelisted, but it still gets caught by AMP from time to time. (by Tetra per tech support) They said it is a b...
We are seeing several endpoints not checking in or receiving definition updates after being updated to connector version 6.2.3.10814. There is nothing unique about these machines in our environment. The last 3 events for these machines are as follows...
Hi! What is the best practice for file policy's on ASA's? Im curently running a file policy with 2 rules. rule 1: File types: Category Dynamic Analysis Capable Action: Block Malware Spero, Dynamic Analysis and Reset connection Store files Malware Ru...
Hello, We use Cisco AMP (cloud) and we have about 4000 endpoints. When we started the endpoints update, a lot endpoints started to update at the same times and our bandwidht was painfully impacted. Can you please share with me an recommended update p...
Hello, I noticed AMP came out with a Windows connector version of 6.1.9.10827 around Dec. 21st. I read the release notes for this version and it doesn't mention anything about 6.2.x versions. I don't understand why this one was released when AMP ha...
I'm currently trialling AMP for Endpoints and have found there's no consistency with the status of the connectors I've installed on machines. Some show that the definitions are up to date. Some show as 'outdated definitions'. There isn't anything ref...
Hi Sir: When I want to connect to my AMP private cloud. It ask me to provide the Certificate path. What's this ? And how to setup it ? The other issue: If I want to connect to public cloud. Why it can't redirect to public cloud web site ? How c...
I was wondering if anyone else has had problems with AMP and Xcode. When our development team tries to kick off a build that should take about 10 minutes, it is taking upwards of an hour. I have tried excluding the various paths the team is using wit...
I am doing a POV of AMP for Endpoint and at this moment I have a detail with Windows Defender, we want to make an exclusion so that it is not blocked by the AMP.These are the exceptions that I add, but it does not work, I do not know if I'm missing s...
