Cisco Bug: CSCvs83217 - display issues after QUARANTINE_RETRO_FN in DT2 and Events
Mar 23, 2020
- Cisco AMP for Endpoints
Known Affected Releases
Symptom: In AMP console in some cases filename and sh256 of detection is not displayed correctly on events displaying Quarantine Successful. Conditions: One of cases this might happen is when there is tetra engine detection on file followed by successful quarantine. AMP changes disposition of the sha256 in cloud and will receive event QUARANTINE_RETRO_FN_FAILED from agent but files on agent are already quarantined.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases