Endpoint Security

cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Cisco CyberSecurity

Forum Posts

Hi,   I have created a malware file policy to block malware for PDF & Executables. When I attach the malware file policy to my Access Control Policy acl I receive a warning " Configured Ports will prevent the file policy from being triggered" The acl...

iwearing by Level 1
  • 5345 Views
  • 3 replies
  • 0 Helpful votes

Is there a way to offer our users a self service facility to upload and analyze their files?  Do they have to contact us everytime they have / receive a suspicious file or attachment?   thx

Is there a way to either whitelist or create an exclusion in Cisco AMP so that anything coming from that IP address or server is ignored by the Cisco AMP agent? We have a KACE appliance that downloads Windows updates to the clients and I would like t...

verasme by Level 1
  • 4839 Views
  • 4 replies
  • 0 Helpful votes

I’m preparing a number of PoV’s on AMP4E and wonder hos exclusions should be handled. According to the user guide (and the raining I have received) exclusions must be made on both AMP and the antivirus. It all make sense. Never the less; I’m running ...

Does AMP for Endpoints  have any native memory-based malware blocking capability? Not looking for detection, but active protection for memory based malware without the use of CTA? Thanks,

abbasali5 by Level 1
  • 3313 Views
  • 3 replies
  • 0 Helpful votes

Hi all, We have a customer who is interested for AMP for Endpoint deployment. All the clients are on Citrix environment and I don't know specially how citrix works. Do I need one instance of AMP for each console or just one instance on the citrix ser...

We are beginning the deployment of AMP for endpoints.  The current policies were auto-generated 2-3 years ago when the main account was originally created, the product has not been touched until now.  In a "training" class the instructor said we may ...

rsharp001 by Level 1
  • 2099 Views
  • 2 replies
  • 0 Helpful votes

Hi, folks!I have the questions about IOC scan in AMP.1) What is the purpose of this feature? Is it like a full system scan in any other antivirus/antimalware  software like McAfee?2) Does every malware has it's own IOC? Or there is a one big cisco IO...