Received an email that endpoint detected a DFC Threat. the file has been quarantined but whatever is calling it on reboot still remains. I've done a full system scan, cleaned Internet temp files and cookies and browser cache. What should I try nex...
Forum Posts
I found a previous post showing how to hit the "View Source" button to pull up highlighted portions of the IOC that were supposedly discovered in the scan. However, this seems to be inaccurate. Here is an example... So the highlighted items are ...
The console is painfully slow right now. Anyone else? I'm guessing they're having problems because everyone is updating to the latest connector due to the BSOD bug.
currently, we are using compliance module 4.3.1728.6145 and anyconnect version 4.9.06037 we are observing that the USB real-time block is not working. previously it was working and then it stopped. could it be related to the windows patch. how can w...
Hello, Last week I rolled out version 7.4.3.20630 from 7.4.1.20439. After the update, it could be few hours, a day or week later, users start experiencing freezing, slowness, system hangs. Right away I knew what was causing it. Windows Security Cen...
Resolved! How to find app id in Android
Hi,Need to whitelist the camera on my tablet, and it doesnt use the default google camera.How can I figure out the app id so I can whitelist it for device owner mode? I am following this guide https://documentation.meraki.com/SM/Apps_and_Software/Con...
Hi, Can we install AMP side by side with other AV product ? some users may still use their existing AV license while testing AMP RegardsBudi
Hi Communcity,we have around 14 MacOS with M1 processor that show a fault during the installation of AMP connector.This is because the MDM profile at https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/216089-advisory-for-amp-for-endpoi...
Especially, a longer reporting period than 2 weeks.
After a running running a full scan we still received email from Cisco AMP the computer is infected.... how i can remove it... Event Type: Threat DetectedComputer: CDCMKTGHJPCL63Hostname: CDCMKTGHJPCL63IP: 192.168.1.186, 10.101.214.190Detection: JS:A...
Resolved! port security with 802.1x authentication
Hello AllI need to allow a group of mac adresses to access a cisco 2960is it possible to use 802.1x for that? Thanks a lot
Hello, Does anyone have some experience with deploying AMP for Endpoints on VMware VDI Horizon, with SSO and Cisco Firepower 2120 at data center and Cisco Firepower 1120 at the edges.and how the management goes with FPMC. thanks
Hi all and sorry if it's already been solved here.Can I use my Secure Endpoint solution ( Essentials plan) for getting lists of applications installed on endpoints? We're using Windows and Mac devices.Thanks in advance.
Can exploit prevention script control distinguish between a user initiated powershell script and one that is externally initiated such as a group policy? I am creating a scheduled task to run on endpoints after group policy has a chance to synchroni...
Good day, I'm not able to find a concrete answer for the following question: When configuring a policy for CITRIX servers, is persistence required if Vdisk is being used? Kind regards.