Cisco Secure Endpoint – Login

The dashboard is available at https://console.eu.amp.cisco.com/dashboard

Access is granted on request, preferably for institutes

• Contact the NWZ hotline to have your institute activated: ivv.hotline@uni-muenster.de
• One Cisco account can access multiple Cisco groups.

Cisco Secure Endpoint - Overview Computer

Overview of the systems to be managed

• Status of the last messages
• Various filter options
• Initiate a scan

Create exceptions for on-demand and scheduled scans

For managing virus scanner exceptions. This is provided and managed centrally by IVV.

In the event of additions, these must be sent to ivv.hotline@uni-muenster.de

• You can create your own lists and manage them independently.
• There are Cisco-managed lists for various products.

Policies for the behavior of the virus scanner

• Initial policy is specified by IVV NWZ.
• Policies are managed independently.
• Separate policies for Windows/Linux/Mac

Download the Cisco Endpoint Security Client

Standalone installer for Windows/Linux/Mac

• Windows Client Installer is provided in ConfigMgr
• Policy serves as the “basis” of the Download Connector
• Client must be able to establish a connection to the Internet via the proxy, ProxyServer is preconfigured in the policies and is therefore not required as a system setting.

Download the Cisco Endpoint Security Client for legacy systems

Download a previous version of the installer, here as an example for Windows Server 2012 R2

Windows system requirements: https://console.amp.cisco.com/help/en/Content/Secure_Endpoint_User_Guide/Windows_System_Requireme.html

Update of the Cisco Enspoint Security Client for the entire computer group

• Cisco updates must be configured via the respective policy for the computer group.
  •  >Management >Policies >Product Updates

Alerts and Reports

The messages can be displayed and displayed in various ways.

It is important to note that messages remain visible for 30 days, this also applies to files that have been removed by quarantine.

Messages can be displayed and edited via the diagram, the timeline, the type of message and the events.

Messages should be processed with the status “Work in Progress” and “Resolved”.

Notifications, time zone and Cisco Secure Endpoint News

There are still a few additions that can be made for an orderly presentation and overview. These include

• Mail notification for incidents
• Correct time zone for better readability of messages
• Centralized news from Cisco on e.g. updates or maintenance processes