cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
1969
Views
0
Helpful
2
Replies

if we block the file that was blocked , if it harmful is there any way to remove from triggered machines even it is blocked

Hi Team,

 

we are blocked file where we considered as malicious, that file resides in machine is there any way to pull out via cisco console itself. or any script can used to delete from those machines?

 

Regards,

Pruthvi

2 REPLIES 2
Troja007
Cisco Employee

Hello @Pruthvirajnasagoni89418,

can you explain the situation please a little bit more clear? What means "if we block the file that was blocked"?
- was there a Threat blocked?
- have you configured a Simple Detection?
- have you configured a Applications Blocklist?
- What is the file type of the blocked file?

What is the exact problem? Does AMP not detect a Threat?

 

Without some details it is hard to help.

Greetings,

Thorsten

Lets say i have file which is detected  as malware and blocked , if it is harmful ,  i want to remove it from machine , how i can do that, is there any option as such in policy -> detect and delete?

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: ISE- Guest and Posture Troubleshooting (36%)

Content for Community-Ad