cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
299
Views
0
Helpful
1
Replies

Configure the SEP to display messages when a threat is detected

mski7861
Level 1
Level 1

Can the Cisco Secure Endpoint Secure Client be configured to display threat information when they are detected in the console?  I checked off Engine Notification in the policy, advanced settings, client user interface.  

1 Reply 1

pheli
Cisco Employee
Cisco Employee

Hello

When check the option "Engine Notifications” under "Client User Interface" in policy, pop up notification will be displyed on connector side when different engines' protection action was triggered.
Here is the image when enable the "Engine Notifications” , System Process Protection block action was triggered in ver 8.0.1.21164.

pheli_0-1709782500857.png

If you want to check the detailed information in Secure Endpoint Console, you can go to “Event” page, use event filter "Detected Threats".
Here is the sample of event paired with the detection mentioned above.

pheli_1-1709782607690.png

Also you can subscribe to a filter view by clicking the "Not Subscribed" botton to set the timing to send the email notification to Secure Endpoint admin.
More information about setting can be referred to the user guide.

Hope this answer can help you.