Cisco AMP with Tetra or AMP + Defender?

[flyingJet]

Hello !

We are currently testing Cisco AMP as our sole AV (we are moving away for ESET) and was wondering should we just use AMP with Tetra for Workstations or use AMP alongside defender ? (moving to Win10).

Appreciate the answers !

[Jetsy Mathew]

Hello Team

Hello

If there is already an existing antivrius running in the endpoints then we would recommend you to disable the TETRA . Please find the deployment guide for the best practices on same. 

If you wish to run AMP and Windows Defender together you will need to disable the Tetra offline engine

https://www.cisco.com/c/dam/en/us/td/docs/security/sourcefire/fireamp/fireamp-cloud/FireAMPDeploymentStrategy.pdf

Regards

Jetsy 

[AlexPi]

From my experience, we are running TrendMicro Officescan and Cisco AMP with Tetra at the same time with no issues whatsoever. I have though created exceptions for each to not scan their respective install locations.

I know that Cisco recommends to disable Tetra if you run another AV, but I have instance where things are detected and blocked by Cisco AMP that are not by TrendMicro. Unfortunately I am not sure if ti is Tetra doing the work, or other components of AMP.