That may be the design assumption, but that's simply not how the product behaves 100% of the time. There are plenty of times where AMP fails to quarantine, misses things on initial scan, or fails to retro quarantine.In the past 30 days I have 43 quar...
The closest thing I've found to initiating a manual scan is to create a policy with a really aggressive scheduled scan configuration, say hourly, then using the API calls that do exist to move endpoints in and out of the aggressive group. While not i...
These false positive episodes happen with increasing frequency over the past year, and are incredibly nerve-wracking. The one-two punch of the System Restore disabled and APT service created is the last straw for our org. Cisco does not seem to have ...