cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Choose one of the topics below for SD-WAN Resources to help you on your journey with SD-WAN

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.

92
Views
0
Helpful
0
Replies
Beginner

SD-WAN AMP Integration

Hi Guys,

 

Any of you had any experience using AMP with the SD-WAN Solution?

 

I've recently been entitled with a Threat Grid Account and since then I'm not able to configure any device that has the security policy with AMP configured.

 

The error I'm getting is this:

 

Failed to update configuration - Failed to get AMP api key from threat grid server for deviceId: C1111X-8P-XXXXXX

Even though I have the API Key configured on the SD-WAN Solution.

 

Here's the configuration on the Security Policy:

policy
 advanced-malware-protection AMP_to_OUT
  file-reputation-cloud-server cloud-isr-asn.eu.amp.cisco.com
  file-reputation-est-server cloud-isr-est.eu.amp.cisco.com
  file-reputation-alert info
  file-analysis-cloud-server isr.api.threatgrid.eu
  file-analysis-file-types pdf ms-exe new-office rtf mdb mscab msole2 wri xlw flv swf
  file-analysis-alert info
  target-vpns matchAllVpn
 !

 

Here's the AMP Key Configured.AMP.JPG

 

Any help would be much apprettiated.

 

Thank you

Best Regards,

Best Regards,
Please rate helpful posts,

Ruben Carvalho CCIE#57952
CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards