Cisco AMP and McAfee MVision

[ahooper]

Hi Cisco Community,

I am wondering if anyone is using Cisco Secure Endpoint with McAfee Vision? If so are there any best practices for co-exisitance? I am not particularly keen on having two endpoint protection applications on our enterprise workstations, however, our management is more interested in meeting compliance to mandates over performance and typical best practices. Issues that have occurred thus far deal with copying or moving data over the network or installing/uninstalling applications through SCCM. The performance is night and day when only one endpoint application is installed on a workstation. Any thoughts or suggestions welcomed.

[Troja007]

Hello @ahooper ,
enclosed some guidelines which may help.
- add Cisco/McAfee exclusions to the products, so they do not scan each other.
- you may think about which product does the file scanning. If two products are scanning a file, this caused performance issues. Just being curious, which vendor registered to the Windows Security Center?

- by carefully with exPloit Prevention. Choose which vendor you want to use for this. As both products are active in the memory, this may results into unwanted behaviour.

- for testing, you may add a global exclusion like c:\, just to see if this changes the performance. If no, there might be driver incompatibility causing the performance issue.

If there are still issues, you may open a TAC case, so we can take a look into the support package figuring out an issue.

Greetings,
Thorsten