Cisco AMP for Endpoint does it consider a shutdown and then power back on to be the same as a restart?

[eblandon]

Hi all;

One of the customer has asked if Cisco AMP product does it consider a shutdown and then power back on to be the same as a restart?

The reason of this questions is because there have been situations where after the connector upgrade the Cisco AMP notification box kept coming up until an actual restart took place. The user was however switching their computer off and turning it back on. The customer advised that for all software he has come across they don’t differentiate but apparently the Cisco product may not, and this is causing some problems for end users.

Any advise on this would be much appreciated.

Enrique.

[brmcmaho · Accepted solution]

That behavior is not expected.  I recommend opening a support ticket on it.

[brmcmaho · Accepted solution]

Apologies for the extra reply-to-self, but it occurs to me that you might be hitting a known interaction with the "fast reboot" feature of Win8/10.  

If so, workaround options:

1. With elevated privs, type

Shutdown –r /t 0

2. in Powershell, type

Restart-computer