We have enabled Orbital search feature in Cisco AMP for our workstations in our environment, however after enabing the Orbital features machines have started to download some data over the internet.
We would like to know what data it is trying to download and how much would be the approximate size of the data, since it affects our bandwidth.
The download you are seeing is the Orbital installer (orbital.msi) and the orbital_update.xml configuration file. These total about 31M in size currently but are subject to change with Orbital updates.
Installing this with SCCM is currently not a possibility. If this is something you would like to have implemented, please reach out to your account team so they can file a feature request.
today the initial installation of Orbital is done by the AMP Connector. During the installation process, the installer checks some AMP for Endpoints Registry keys and so on. Therefore, today, you cannot install Orbital without AMP for Endpoints.
I have seen some discussions around this topic to change this dependency. But today, there is no official statement for this. Best way is to ping your Cisco Representative to get official statements. In addition, your Cisco Representative can open a Feature Request on behalf of you.