12-09-2020 07:15 AM
Hello,
I'm in the process of deploying AMP4E on Windows 10 workstations and I would like to know how AMP will react to Windows Defender?
Thanks
12-09-2020 07:18 AM - edited 12-09-2020 07:24 AM
Good engagement, Pedro. Message received ✉. Malo McWare was here but he jumped off a minute ago. Meet me back at HQs. I know where he's going. (Disclaimer: this post is part of the AMP for Endpoints Advocacy Campaign on the Cisco Gateway)
12-10-2020 04:46 AM - edited 12-10-2020 04:48 AM
Hi,
Windows Defender is included in AMP4E exclusions, and will not be touched.
From Windows prospective, upon connector installation, by default it will recognize AMP4E as the virus & threat protection in Windows Security and will deactivate Windows Defender periodic scans.
12-10-2020 09:11 AM
Although the above state is correct, it will only work this way if we have AMP and Tetra enabled on the Policy, if we don't have Tetra enabled, then Windows defender will continue to be considered as the Default virus & threat protection in Windows Security. Also Windows Defender will not disable automatically on Windows servers version 2016 and above https://docs.amp.cisco.com/en/A4E/AMP%20for%20Endpoints%20User%20Guide.pdf (Page 106)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide