3 ms·
God I wish - central management and logging is mandatory under all of these compliance regimes. We’re in the middle of adopting HiTrust and I’ve been forced to
by snuxoll 6y ago
God I wish - central management and logging is mandatory under all of these compliance regimes.
We’re in the middle of adopting HiTrust and I’ve been forced to install Cisco AMP on all of my servers. The product is absolute garbage and frequently eats up all available RAM, causing itself to crash and leave a core dump filling up my root partition.
The worst part? AMP on Linux is literally ClamAV plus a kernel module to monitor file access, network connections and process creation.
- greedo 6y agoWe've deployed AMP across our RHEL environment, and experienced the exact issues you've described. Cisco's general remediation is to increase the exclusion policy til the core dumps stop occurring. On some systems, AMP is barely monitoring any filesystems...