- This topic has 0 replies, 1 voice, and was last updated 4 years, 2 months ago by
.
Viewing 1 post (of 1 total)
-
Posts
-
CISCO AMP CONSOLE
- Create an API Key pair in accordance with Cisco guidance: https://www.cisco.com/c/en/us/support/docs/security/amp-endpoints/201121-Overview-of-the-Cisco-AMP-for-Endpoints.htm
PRECINCT CONFIGURATION
- Go to Admin > SOAR > Cisco AMP for Endpoints API > Config
- Click the checkbox for Enable the Cisco AMP for Endpoints API
- Paste the Client ID and API Key
- Click the disk icon (Save)
- Click Jobs and go to Artifacts from Cisco AMP.
- Select Triggers, expanding Manual Trigger and Interval Trigger.
- Toggle both to State: ENABLED
- The Interval Trigger is set to 2 hours by default, but you can update it to what best suits your organization. (Recommended: 10 minutes)
- Click the disk icon (Save)
Viewing 1 post (of 1 total)
- You must be logged in to reply to this topic.