Can you deploy Advance Malware Protection (AMP) on a closed network

[williaat0125]

I'm currently testing and planning our FMC-1600 with FP-2110 devices. My firewall solution must work within a closed network (no internet access). I came across AMP and really like what it can do. My question to anyone is, can I enable AMP within a closed network? We typically "air gap" files into the system (like patches, updates, etc.) so if I can enable it on a closed network, what's the daily maintenance of it to keep it happy? Is it "practical" to implement this on a closed network, or was Cisco targeting customers connected to the internet?

Thanks for any and all responses.

[Marvin Rhoads · Accepted solution]

Yes - using AMP Private Cloud.

it has some limitations but does give you the basic features of AMP / Cisco Secure endpoint.

[williaat0125]

Sounds good. I'll check that out.  Thanks.

[balaji.bandi]

AMP support private cloud :

https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-private-cloud-virtual-appliance/118336-configure-fireampprivatecloud-00.html