cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1474
Views
5
Helpful
2
Replies

Does AMP Detect Port Scanning ?

Does AMP Detect Port Scanning ? if yes any orbital query or  Event id or Detection name to check ?

 

 

2 REPLIES 2
Matthew Franks
Cisco Employee

AMP wouldn't be the proper tool for detecting port scanning.  A firewall or IDS/IPS would be more appropriate.

 

Thanks,
Matt

just for this, Cisco AMP already lost the battle to Symantec Endpoint Protection(SEP). SEP can detect and block ports scanning very well. We are deciding to get rid AMP and keep SEP or other way around.