09-14-2020 10:23 AM
Does AMP Detect Port Scanning ? if yes any orbital query or Event id or Detection name to check ?
09-14-2020 11:14 AM
AMP wouldn't be the proper tool for detecting port scanning. A firewall or IDS/IPS would be more appropriate.
Thanks,
Matt
03-23-2021 11:40 AM
just for this, Cisco AMP already lost the battle to Symantec Endpoint Protection(SEP). SEP can detect and block ports scanning very well. We are deciding to get rid AMP and keep SEP or other way around.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: