Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We output Secure Endpoint events to our SIEM. I am seeing Cloud IOC events in the SIEM, however, upon review of the endpoint in Secure Endpoint, the IOC indicators are displayed. This appears to be true of low-criticality events. Also, when I at...
I am experiencing some issues where machine names are changing, and I am getting incorrect reporting. I found Cisco Article updated June 28, 2022 Titled : Cisco Secure Endpoint Guide to Identity Persistence Updated: June 28, 2022, Document ID:21755...
What is the proper method of applying a custom exception to just a group of computers within a policy?is there a way to do this without having to clone a policy? that seems to defeat having groups.
tHow does Threat Grid operate once an organization exceeds its submission rate limits? Does it ignore / no longer inspect files at that point until the 24 hour rolling window resets?
We are having issues with AMP for Endpoints installed on Windows Server 2012 R2 servers with SQL clustering.it appears the cluster volume store is not accessible by the cluster if AMP is installed. We have not implemented any exclusions other than ...
Thank you. We checked with Cisco and indeed disabling MAP (not placing in audit, but disabling) worked and in fact MAP is not recommended by Cisco for server deployments.
