Hi community! We have a few Surface tablets that need Windows Early Launch Antimalware Protection temporarily off in order to boot. https://docs.microsoft.com/en-us/windows-hardware/drivers/install/early-launch-antimalware Alternatively we can remove...
Forum Posts
I am very new to this Cisco product, and am currently going through some vendor security questions, and one of the questions is if our end user security will generate a log in the case of a failure to write a separate log. This might be a very simple...
Early on 5\21\2022, Cisco Endpoint Protection trapped this event: 'detected a Cloud IOC: Executed Malware IOC'. It was classed as 'AMADEY' Malware. Because it was classified as a HIGH threat, and we have automated actions enabled, the affected comp...
Hi All.At the command line on a Mac is a command, which can fix two different issues1. If you get an error like thisERROR] MDM_Connect: Unable to create MDM identity from persistent reference: -25304 (The specified item is no longer valid. It may hav...
Resolved! Unable to enrol device
I am trying to enrol and iPad after erashing it, its loaded in DEP but when get to the prompt to say the device will be managed by an MDM and i go to enter my Meraki credentials they don't work and I am getting "invalid network ID" See attached image...
Hello! I'm looking for a bug listing for AMP. Specifically, where new bugs are acknowledged to exist by Cisco. The most recent example of the IOC for chrome.exe is an example. I did receive an email, but I'm searching for where this bug is listed alo...
Lastnight I received many alerts about the Chrome update being indentified as Malware, until around 10PM EST, when a retrospective Malware alert was received making that file as Clean.Did anyone else see this same behavior?
I have this warning from Cisco AMP and I don't know how to solve it. Could anyone please help me in this? chrome.exe has been detected as W32. Trojan.NM.Quarantine was successful.
hi there, I've enrolled some computers in AMP and now want to "link" computers to users. I've checked the documentation and I haven't found any possible solution. When I go in Insight in SecureX and see the device, I see a field "Associated user" whi...
Hi all, Does Cisco AMP Supports Anti bot ? . My Requirement is something like thisit should complements existing endpoint security solutions by monitoring network ports for rogue activity and detecting infected internal endpoints sending command and ...
Resolved! Signing Certificates
Hi I need some help! I am trying to update our signing certificates because 2 seemed to have expired. The new certs were pushed out to the iPads and they are on them and show the updated ones in the certificate list in Meraki. But if you look at the ...
Good day, I'm still learning this product, but I was curious on the Signature Set Update and Component Download(Failure/Success) events. Can someone break down exactly what happens with these events? Thank you,Maurice
Hey all, I've been able to get exclusions done on our physical workstations, but haven't had success with getting Secure Endpoint to exclude certain paths. I've tried blocking the processes by including the path to the executable, I've tried using th...
I have what may seem a like a simple question. I have a Standalone FTD 4110 appliance that is a managed by FMC. I have added a second identical standalone 4110 to FMC(same software version etc.) . The First FTD is completely configured. If I create ...
Evaluating Cisco AMP, and I would like some community feedback on how you see this product stacking up against Defender ATP etc.IMO: AMP is lacking user logon monitoring. There is no analysis on this part. Failed logons to a server, creation of new a...
