cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2292
Views
0
Helpful
2
Replies

Exceptions in AMP for Endpoints

I am doing a POV of AMP for Endpoint and at this moment I have a detail with Windows Defender, we want to make an exclusion so that it is not blocked by the AMP.

These are the exceptions that I add, but it does not work, I do not know if I'm missing something else. can you help me?

amp1.pngamp2.jpg

 

 

2 Replies 2

brmcmaho
Cisco Employee
Cisco Employee

Hello.  Judging from the screenshot, it looks like Windows Defender is disabling itself because it has determined that another AV solution that Microsoft recognizes, namely AMP, is running.  It would behave in a similar fashion for other third-party AVs.  This has nothing to do with any exclusions installed in AMP itself, because it's Windows behavior that is driving this.

 

If you want to continue to run Windows Defender alongside AMP, the simplest way to do that is to disable the TETRA offline engine in your AMP policy.

thank you very much, it was an excellent help.