Good morning! We're currently facing the challenge of isolating our Linux systems (running Ubuntu and Debian) from the Cisco Secure Endpoint console (formerly known as AMP). Despite our efforts, we haven't been able to find a direct method to achieve...
Forum Posts
Still running 2008R2 DCs believe it or not and they're running DPS v5.7.1. Does anyone know the URL to download legacy versions of DPS?Thanks in advance.
Resolved! False positive? GT:JS.Hyena.3 detections
Last night we started getting GT:JS.Hyena.3.x detections on a number of computers. We are continuing to receive them, over 150 machines so far. Anyone else seeing this?
We started getting W32.RetroDetected (Chrome.exe) detections on a number of computers. We are continuing to receive them. Anyone else seeing this?
Hello TALOSSince the retirement of Immunet at the beginning of 2024, has maintenance of Clam AV CVD signature files by Cisco TALOS been impacted? Are the Clam AV community signature sets still being actively maintained by Cisco? Thanks in advance
We have an end user machine that was placed into isolation after a high severity Cloud IOC Event (Cloud IOC: W32.PowershellIEXReplace.ioc) and a low severity Cloud IOC Event (Cloud IOC: W32.PowershellObfuscationAttempt.ioc) was detected. Powershell ...
Hello, We have some issue with an API used to register endpoint on ISE. I'm looking for logs, report where I can see Identity Group Endpoint, registration, move and deletion. Currently, I only find the last/current status. Hope it's clear, thank you....
Resolved! Multiple Secure Endpoint Alerts
Hi, in the last few hours our Secure Endpoint has alerted to hundreds of events associated with "Gen:Variant.Jatommy.3.3433". While the files are being quarantined in most cases, i believe this may be a false positive, is anyone else seeing these ale...
Hello,we've noticed a shift in the development direction of the official Secure Endpoint web interface, which is unfortunately becoming a challenge for us to work with on a daily basis. As a result, we're considering creating our own administration i...
I am creating Deployment Profiles from Secure X in order to push Secure Client (and our modules) to workstations and servers. The deployment profile for workstations works as expected, whether using a Full Installer or Network installer. I am now t...
Hello everyone, how are you? I'm looking to implement Dot1x on my wired network using ISE as the authenticator and utilizing certificates via TLS. I'd like to know if there's a way to generate the certificate directly on ISE and install it on the ma...
We've started getting googleupdate.exe popping up in the dashboard as Cloud IOC: W32.RubeusMalware.ioc, starting this afternoon. Neither the actual detection (352d9f7ed7f0d463aeb21597d6cf1492df34f622027a853a6e861c54434e6caa) nor the parent (googleupd...
Hello, a few days ago, we noticed that the event logs of the individual clients in the Secure Endpoint Dashboard of one of our larger customers only contain very few entries. Normally we see several dozen to 100 or even more entries there, but now in...
Hi,I am getting this error while installing v8.2.1.21612. I have completely uninstalled the previous versions and rebooted several times. Many computers in our environment do not have this issue only a few Windows 10 machines. Any help would be great...
Resolved! Uninstall/ Remove AMP Secure Endpoint
Is there a way to uninstall the Cisco AMP connector from all devices at the same time, instead of logging into each device and uninstalling it manually?
