cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2483
Views
5
Helpful
2
Replies

Does AMP Detect Port Scanning ?

Does AMP Detect Port Scanning ? if yes any orbital query or  Event id or Detection name to check ?

 

 

2 Replies 2

Matthew Franks
Cisco Employee
Cisco Employee

AMP wouldn't be the proper tool for detecting port scanning.  A firewall or IDS/IPS would be more appropriate.

 

Thanks,
Matt

just for this, Cisco AMP already lost the battle to Symantec Endpoint Protection(SEP). SEP can detect and block ports scanning very well. We are deciding to get rid AMP and keep SEP or other way around.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: