05-18-2023 03:02 AM
Hello,
I am interested how does Secure Endpoint work in Windows Safe Mode? What engines are functioning (if they are functioning at all) and so on..
I could not find any documentation about it.
Thanks
Solved! Go to Solution.
06-17-2023 12:24 AM
Windows Safe Mode is a way to start Windows in a basic state, using a limited set of files and drivers.
Please note, that Safe Mode in Windows enable to start the OS with very limited set of loaded drives:
It can help you troubleshoot problems on your PC by narrowing down the source of a problem
There are two versions of safe mode: Safe Mode and Safe Mode with Networking.
The way Safe Mode works is Windows disables all extra services when you start it. Safe mode is a troubleshooting and diagnostic mode and should only be used on a limited basis. For more info on this topic please see the introduction of this article from MS Tech Net: https://social.technet.microsoft.com/wiki/contents/articles/32982.windows-10-safe-mode.aspx
AMP does not run in Safe Mode because Windows disables it. I just tested this configuration in my Lab Windows 10 machine and it will not let me start the service.
Windows will not load the 3rd party software then, including Cisco Secure Endpoint (Formerly AMP).
-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Secure Endpoint through our live Ask the Experts (ATXs) session. Check out Cisco Endpoint Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-endpoint-security-ask-the-experts-resources/ta-p/4394492] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
06-17-2023 12:24 AM
Windows Safe Mode is a way to start Windows in a basic state, using a limited set of files and drivers.
Please note, that Safe Mode in Windows enable to start the OS with very limited set of loaded drives:
It can help you troubleshoot problems on your PC by narrowing down the source of a problem
There are two versions of safe mode: Safe Mode and Safe Mode with Networking.
The way Safe Mode works is Windows disables all extra services when you start it. Safe mode is a troubleshooting and diagnostic mode and should only be used on a limited basis. For more info on this topic please see the introduction of this article from MS Tech Net: https://social.technet.microsoft.com/wiki/contents/articles/32982.windows-10-safe-mode.aspx
AMP does not run in Safe Mode because Windows disables it. I just tested this configuration in my Lab Windows 10 machine and it will not let me start the service.
Windows will not load the 3rd party software then, including Cisco Secure Endpoint (Formerly AMP).
-----------------------------------------
If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.
You can also learn more about Secure Endpoint through our live Ask the Experts (ATXs) session. Check out Cisco Endpoint Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-endpoint-security-ask-the-experts-resources/ta-p/4394492] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide