I have enabled Script protection feature in our environment. Where do i verify if it is enabled or not in "Policy.XML" file. Can some one help with what is the keyword to check if this feature is enabled or not on a specific machine.
Forum Posts
Resolved! Systems Manager trial
Hello all,I'm working my way through the Systems Manager free trial. I have used this software before with another employer, so I'm quite familiar with it. I believe I have it setup properly, but I still can't get the enrollment process to start. I h...
Resolved! Recovering licences from dead devices
Hi all,I have some devices both student owned and school owned that have died. This means I have some app and meraki licenses that are tied up with them. Is there a way to retrieve these licences? From what I can tell any commands I send from Systems...
Hi guys,I have Meraki MDM setup pretty well, VPP auto install all apps etc, all iOS devices, of course are supervised via Apple's DEP so the management profile is locked and can not be removed by the end user. The only problematic area is that after ...
Hi, If switch is configured with as authenticator and multi-host mode is configured.How switch decides the order of client mac address for the supplicant authentication. and can it be changed?or can destination mac address be changed to source mac of...
We have enabled Script process protection feature in our environment, however we dont see any filter for this feature under "Events" tab. How can we filter or find the script process protection alerts on AMP console for our machines.
Before logging a case wanted to check if anyone had a quick answer to this one. I have a device, server running 2012 that has in C:\Program Files\Cisco\AMP\clamav 3 directories totally nearly 35GB. This does not seem right. The majority of the files...
Hello, We had a TG appliance and would like to do an online system upgrade via a proxy server. We referred to the TG documents and found that we have to define and set direct internet connectivity on the dirty interface (outbound traffic Only) direc...
Resolved! All computers showing unsupported
I inherited Cisco AMP after a couple of our team members left. It had not been monitored for quite some time and the computers were on connector 6.0.5 and 6.0.9 as well as Symantec Cloud. We are a hosting and professional services provider and we hav...
Resolved! Cisco AMP4E blocking explorer.exe
Hello.Cisco AMP4E blocking explorer.exe (windows explorer. exe) and we get black screen. How to know why it's happened ? Why AMP4E can't get a handle on the process's executableOn Event details we get this information. ( Now i use in audit mode ...
Hi I want to install endpoint IOCs and scan all the computers in my company but I found only one way to meet myneeds. The method needs to enter the account and password to install a schedule scan.Does anyone knows another way to run a endpoint IOC wi...
Hello,After upgrading to Private Cloud 3.1.2 API Server became unavailable. datateam-api's log saysERROR com.cisco.amp.data.api.APIServer - Failed to start API server.com.datastax.driver.core.exceptions.NoHostAvailableException: All host(s) tried for...
Can we fetch vulnerability details with Cisco AMP using Orbital feature. If so can someone please let me know if there is any inbuilt query or we have to create customize queries for fetching this information for all applicable endpoints. If there is...
In traditional AV you would add an exclusion so that it would not be checked, however you would still have this exclusion scanned on a scheduled scan Does this apply to AMP4E or will the exclusion be ignored during the full scan too
When installing version 7.1.5 of the AMP agent to test isolation in the documentation, it appears that it is only supported for computers with x64 bits. Could you inform me if cisco is thinking of developing it in next versions support for 32 bit equ...