Endpoint Security

HI all,   I have noticed that I have many drops in Firesight Management Centre connection table. The drops are between my Internal DNS and ISP's dns servers. They are documented as "Malware-Other dns request with long hostname segment - possible data...

Hi All, I found firepower to blocked googletoolbarinstaller_en_signed.exe from IE browser if i use the Firefox will not to block. Is this program real Malware ?

Hello All, One of our SourceFire device has a Malware license and recently we enabled Malware blocking. We created a File policy with the action Block Malware with reset. From the Malware events, I can see the action as Cloud Lookup Timeout which ma...

Hello,we've found marvelous Talos work done on CCleaner, again respect for State of Art discovery - (no irony - best part of AMP solution).As an output, we got ClamAV signatures to detect this threat, all you need is to scan your infrastructure or wa...

Hi,please be aware that AMP "potential ransomware" email notifications does NOT work properly.We've tested it with the most obvious wannacry samples. Threat was detected as ransomware and quarantined but notifications are not send. We've opened TAC, ...

Does any one experiences "Failed to load data!"problem whenever connection details are checked?We see it instantly for a couple of days now...:(   

Can you share any information on what to expect in the future for connector version 6.0.Thank you

This issue is kind of brain teaser, I have done multiple Private AMP implementations and I am able to see vulnerable software/application in the reports however I see this report as blank for one of the implementation. We are running latest cloud ve...