On one of our servers which runs many databases, the AMP temp file for scanning appears to be ballooning to 15+ gigs and filling up the C drive. Is there a way to see exactly what AMP is scanning so we can adjust out exclusions appropriately?
Forum Posts
Resolved! Default Outlook Temp Exclusion
Hi, We are seeing an issue where the default Cisco AMP exclusions for Outlook aren't enough because Outlook Temp is also under /private/var so it's scanning this location and we are getting inundated with Threat Detected notifications every time so...
The most consistent false positive i get in amp for endpoints is .tmp files from outlook. here is an example below. I'd like to be able to create some kind of exclusion to ignore this type of event. My thought was to make a process exclusion for outl...
I’m trying to deploy AnyConnect on ftd version 6.2.3. I’ve chosen the outside security zone (also tried interface group) as interface, but every time i try to deploy I get the error below. If I remove the vpn policy from the device (two 2130 in ha), ...
i was trying to open my website but couldnt due to virus or melware . i did scan my laptop and cleaned it but still cant open the website from my laptop.
Hi, We purchased the AMP application when reading the installation documentation it states to open a TAC case to have the Identity synchronization activated. I can't find anything on the Internet to confirm this. Can someone clarify the steps necessa...
Hi Everyone,In version 5.0 we made changes to the way files and paths are stored. Our existing articles will be updated soon and we apologize for the delay. The files and paths are now stored in an referential structure in the historyex.db file. Atta...
Dear,does the AMP for end point subscriptions covers Smartnet. what type of support it provides
Resolved! Updated policy with serial number xxxx
"Updated policy with serial number xxxx" displayed at policy update,What does the xxxx part show?
Hello, we have configured the Antimalware policy to block malware, but when we do a test of antimalware test download from the below site, it gives an option to save the file in internet explorer, the antimalware is not blocking. it should not give a...
On the linux server side where Cisco AMP is installed, want to check the scan exclusion information that was set up.Where can I check on the file?
Hello everyone, I've got a scenario in which I have two ASA 5545-X in HA mode(Active/Standby). Now I want to let's say install a SFR or an ASACX module on them. So I suppose I have to install the module one by one on every which ASA. I was wondering ...
Anyone know if or when AMP will be available on the ISR 1000 platform. tks
Resolved! Cisco Firepower
Hi Everyone, I have one scenario but don't know how to do, one of my client asked me to block attachment option form Skype application. It means that there organisation users are able to use everything in Skype but don't able to attach any file. Can ...
Hi,A customer has a security endpoint who can perform CIFS scanning on Files.They want to know if AMP can do that.AMP for Endpoint can scan CIFS ?Thx.
