Endpoint Security

We are getting hundreds of these threat detections this morning in our environment. These are all considered "low" and the smss.exe file is clean (SHA-256: 56afe5133fdc5806ec6b19436f7b55f1499cfc94619740c171424fbcf7808fd3)Seems to be triggered at logo...

hello.I'm trying to do an ISE failover. As far as I know, unlike wlc, ise does not automatically change the secondary device to primary even when the primary device is turned off. So how should we check the results of a successful failover? I think i...

Hi everybody, my name is Stephanie and I connect customers with the teams working on new features for security products such as Secure Endpoint, Firewall products, XDR and more.  I'm reaching out today because we are looking for people to give feedba...

Anyone having this issue as well on some W7 systems?Error Code 16019Connector update from 7.5.5.21061 to 7.5.7.21234 failed.   Error: Unable to verify Secure Endpoint's digital signature. Please update Windows..

Today there are multiples detections related to Winrar.exe. It looks like a false positive, but it´s weird, Is there a reason for this? The hash is e97e8fb9fdf2df5d8d5a4efcbd6d2eee42900c2de44f34f93fa25d8f84b80e80.

Hello,i have cisco sf350,sf200 and sf220 in my organization,sf200 and 350 works good with port security (there are option "secure permanent" which saves source mac and blocks if u plug in another mac but with sf220 there are only dynamic lock which o...

Boa tarde pessoal, como vão?   Pessoal estou deixando na TV do escritorio a tela com o AMP aberto. Mas de tempos em tempos ele desloga e pede credenciais de novo. Como posso resolver essa questão?

Good morning, I sent the connector to update to the latest version (8.2.1.21612) and after waiting a few hours I see that I have 300 devices in the inbox that report the same event, which is "Suspicious smss.exe Parent Process". Could the new version...

Hello everyone. I am looking for a way to make Cisco Secure Endpoint to work with and send logs in real time to Google Chronicle SIEM.Can you please provide some instruction, if there is any? Thank you in advance!

I am trying to stop the Secure Endpoint service to do testing and I am not able to do so.Following these documents:https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/213690-amp-for-endpoint-command-line-switches.htmlhttps://www.cisco.c...