Endpoint Security

AMP Threat Grid has a simple yet powerful API.  You can obtain malware intelligence by searching for malware submissions associated to an IP address with a simple GET request like the following:https://panacea.threatgrid.com/api/v2/search/submissions...

What is AMP Everywhere and why is it needed? 

Has anybody else experienced AMP blocking one of the last Microsoft updates.  The file blocked is below along with threat name and hash.  Also, is there a portal that gives more information on these threat names?  http://wsus.ds.download.windowsupdat...

Just recently went live with the new Sourcefire module on our prod ASA (5555X). That has gone well :) We are licensed for the malware protection service as well. Currently there is a file policy in place to "detect" all file categories. Would like to...

hi out thereIs there some here which can point me to a quick guide in creating a simple setup for a asa 5506 with a full firepower licens (AMP/URL & Controle) - I need to verify where I do a mistake - I try to configure this asa as malware proction i...

We have an open case for an AMP8150 power supply. Tech support is telling us that it is not hot swapable, but some documentation indicates they are.We need a definitive answer.Cisco Service Request 636487513Thanks,Larry

Read the NSS Labs report to see how Cisco AMP achieved the highest security effectiveness in this year’s test. A leader for the second year in a row, Cisco AMP is the only solution that goes beyond point-in-time detection to continuously analyze malw...

Hello,We tried the deployment of the FireAMP Connector to different PCs. The only two Windows 8.1 Laptops crashes now sporadically with a Bluescreen and "System Service Exception (netio.sys)" Many times a day.Kind RegardsMarco

Hello, I had a question about the new Vulnerable Programs feature which gives an extremely useful view of all the vulnerable applications on endpoints including the number of computers on which the applications are installed along with the CVSS Score...

We are seeing this a lot in our File Summary Log in Defense Center.  Action:Cloud Lookup Timeout.  Was wondering what the cause would be?

We're currently running the AMP for windows client. When I'm in the SourceFire web console and try to force or schedule a scan on endpoint clients I get a message that "There are no endpoint IOC documents activated."I don't see how to resolve this in...

Meet Tom, the IT Security Guy. Step into his shoes to understand the problems he faces every day. Then learn how Cisco Advanced Malware Protection helps him better protect his organization and prevent breaches… and in the case of a stealthy intrusion...

Hi All,Please find below information regarding transparent proxy from WSA user guide.This means that I would need to enable HTTPS proxy on WSA in case I am redirecting https traffic as well towards the proxy(Which would be in most of the cases).So, d...