Integrate AMP for Endpoints with FMC Data Feed

Available Languages

Download Options

  • PDF     (190.1 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (265.8 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (291.2 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:October 26, 2026
Document ID:214259

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

This document describes how to integrate AMP for Endpoints with FMC for event data integration.

Issue

Integrate AMP for Endpoints with FMC so FMC can receive AMP for Endpoints event data.

Environment

  • Firepower Management Center (FMC) with access to the AMP menu.
  • Advanced Malware Protection (AMP) for Endpoints account with valid credentials for the appropriate AMP cloud (for example, US, EU, APJC).
  • Browser access from the FMC UI to the AMP for Endpoints cloud for the authorization redirect.
  • FMC version 6.x ,7.X.
  • The article references the legacy navigation path AMP > AMP Management > Add AMP Cloud Connection, which corresponds to Firepower Management Center 6.x and applies generally across FMC 6.0 through 7.x

Resolution

Note:  This integration sends event data from AMP for Endpoints to FMC in one direction only.  This procedure does not integrate configuration settings.

Complete these steps to register the AMP for Endpoints cloud connection in FMC:

1. Confirm access to the FMC and the AMP menu.

2. Confirm valid AMP for Endpoints credentials for the AMP cloud to register.

3. From FMC, click AMP > AMP Management.

Integrationimage.png

4. Click Add AMP Cloud Connection.

Click Add AMPimage.png

5. Select the AMP cloud used for AMP for Endpoints and click Register.

Select APJC Cloudimage.png

6. Click Yes to allow redirection to the AMP for Endpoints console.

Redirection to AMP for Endpoints console

  1. Log in to AMP for Endpoints.

Log in to AMP for Endpoints Console

  1. Click Allow to authorize the AMP to FMC connection.

Authorize

  1. Return to the FMC browser tab.
  • Verify that the Cisco AMP Solution Type field displays AMP for Endpoints and AMP for Networks and that the State field shows a blue checkmark.

Verify

Related Content

Revision History

Revision Publish Date Comments
2.0
26-Oct-2026
Recertification
1.0
29-Mar-2019
Initial Release
TAC Authored

Contributed by Cisco Engineers

  • Brandon Macer
    Cisco AMP Engineer
  • Joshua McDonald
    Cisco AMP Engineer

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products