AMP Unity and AMP Private Cloud

[Marijo Bartakovic]

We are thinking about deploying the AMP Private Cloud and Threat Grid on-premises appliance, and link the ESA into the AMP Cloud.

Is this already possible, or only available to the public cloud?

Where can I find the latest User Guides and Documentations from the AMP private cloud? I still see the old name FireAMP and source fire in those docs. See here: https://www.cisco.com/c/en/us/support/security/fireamp-private-cloud-virtual-appliance/products-configuration-examples-l…

Regards,

Marijo

[emirolyu]

Hello Marijo,

Yes, you could deploy ESA with AMP Private Cloud and Threat Grid Appliance. That integration is supported starting with ESA version 10.0.

The integration would enable your ESA(s) to:

- query file reputation for attachments (AMP Private Cloud)

- submit unknown attachments for analysis (Threat Grid Appliance)

- learn about retrospective verdict changes (AMP Private Cloud)

AMP Private Cloud documentationi s available at: https://docs.amp.cisco.com  

(Private Cloud documentation)

What you wouldn't get on AMP Private Cloud yet is AMP Unity - it's only available with public AMP Cloud at the moment. That's what allows ESA (11.1 and above) to leverage file black and white lists created via AMP for Endpoints console. A brief view into this capability can be found here:

AMP Unity - Feature Overview - YouTube

(http://cs.co/ats-youtube)

While AMP Unity specifically is not available for AMP Private Cloud, it will be coming later.

Hope that helps!