Guest

Preview Tool

Cisco Bug: CSCvs83217 - display issues after QUARANTINE_RETRO_FN in DT2 and Events

Last Modified

Mar 23, 2020

Products (1)

  • Cisco AMP for Endpoints

Known Affected Releases

NA

Description (partial)

Symptom:
In AMP console in some cases filename and sh256 of detection is not displayed correctly on events displaying Quarantine Successful.

Conditions:
One of cases this might happen is when there is tetra engine detection on file followed by successful quarantine. AMP changes disposition of the sha256 in cloud and will receive event QUARANTINE_RETRO_FN_FAILED from agent but files on agent are already quarantined.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.