cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1544
Views
5
Helpful
2
Replies

Does AMP Detect Port Scanning ?

Does AMP Detect Port Scanning ? if yes any orbital query or  Event id or Detection name to check ?

 

 

2 REPLIES 2
Matthew Franks
Cisco Employee

AMP wouldn't be the proper tool for detecting port scanning.  A firewall or IDS/IPS would be more appropriate.

 

Thanks,
Matt

just for this, Cisco AMP already lost the battle to Symantec Endpoint Protection(SEP). SEP can detect and block ports scanning very well. We are deciding to get rid AMP and keep SEP or other way around.

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE- Guest and Posture Troubleshooting (40%)

Content for Community-Ad