Hi guys,I have Meraki MDM setup pretty well, VPP auto install all apps etc, all iOS devices, of course are supervised via Apple's DEP so the management profile is locked and can not be removed by the end user. The only problematic area is that after ...
Hi, If switch is configured with as authenticator and multi-host mode is configured.How switch decides the order of client mac address for the supplicant authentication. and can it be changed?or can destination mac address be changed to source mac of...
We have enabled Script process protection feature in our environment, however we dont see any filter for this feature under "Events" tab. How can we filter or find the script process protection alerts on AMP console for our machines.
Before logging a case wanted to check if anyone had a quick answer to this one. I have a device, server running 2012 that has in C:\Program Files\Cisco\AMP\clamav 3 directories totally nearly 35GB. This does not seem right. The majority of the files...
Hello, We had a TG appliance and would like to do an online system upgrade via a proxy server. We referred to the TG documents and found that we have to define and set direct internet connectivity on the dirty interface (outbound traffic Only) direc...
I inherited Cisco AMP after a couple of our team members left. It had not been monitored for quite some time and the computers were on connector 6.0.5 and 6.0.9 as well as Symantec Cloud. We are a hosting and professional services provider and we hav...
Hello.Cisco AMP4E blocking explorer.exe (windows explorer. exe) and we get black screen. How to know why it's happened ? Why AMP4E can't get a handle on the process's executableOn Event details we get this information. ( Now i use in audit mode ...
Hi I want to install endpoint IOCs and scan all the computers in my company but I found only one way to meet myneeds. The method needs to enter the account and password to install a schedule scan.Does anyone knows another way to run a endpoint IOC wi...
Hello,After upgrading to Private Cloud 3.1.2 API Server became unavailable. datateam-api's log saysERROR com.cisco.amp.data.api.APIServer - Failed to start API server.com.datastax.driver.core.exceptions.NoHostAvailableException: All host(s) tried for...
Can we fetch vulnerability details with Cisco AMP using Orbital feature. If so can someone please let me know if there is any inbuilt query or we have to create customize queries for fetching this information for all applicable endpoints. If there is...
In traditional AV you would add an exclusion so that it would not be checked, however you would still have this exclusion scanned on a scheduled scan Does this apply to AMP4E or will the exclusion be ignored during the full scan too
When installing version 7.1.5 of the AMP agent to test isolation in the documentation, it appears that it is only supported for computers with x64 bits. Could you inform me if cisco is thinking of developing it in next versions support for 32 bit equ...
I am trying to configure one weekly summary report of AMP for Endpoints , where i did not have option to send that report to distribution email address. ( example SecurityIT@domain.com) , where i see that i can receive on my own email address( xyzna...
Hi,I'm trying to set up a script whereby I can access one of our switches using SSH. I'm currently trying this from the CLI of my PC but getting the following:C:\Users\<user>>ssh <switch> -l <username> -oHostKeyAlgorithms=+ssh-dss,ssh-rsa -oKexAlgor...
Hi Team, we are blocked file where we considered as malicious, that file resides in machine is there any way to pull out via cisco console itself. or any script can used to delete from those machines? Regards,Pruthvi
