Does AMP Detect Port Scanning ?

[Pruthvirajnasagoni89418]

Does AMP Detect Port Scanning ? if yes any orbital query or  Event id or Detection name to check ?

[Matthew Franks]

AMP wouldn't be the proper tool for detecting port scanning.  A firewall or IDS/IPS would be more appropriate.

Thanks,
Matt

[lnguyen@meriwest.com]

just for this, Cisco AMP already lost the battle to Symantec Endpoint Protection(SEP). SEP can detect and block ports scanning very well. We are deciding to get rid AMP and keep SEP or other way around.