Cisco Cisco Firepower Management Center 4000

Delete a Cisco cloud connection if you no longer want to receive malware events from the cloud. To 
temporarily stop malware events from being sent for a particular connection, you can disable the 
connection rather than deleting it. In this situation, the cloud stores the events until you re-enable the 
connection; the cloud then sends the stored events.

In rare cases — for example, with a very high event rate or a long-term disabled connection — the cloud 
may not be able to store all events generated while the connection is disabled.

Note that deregistering a connection using the FireAMP portal (instead of the Defense Center’s web 
interface) stops events from being sent, but does not remove the connection from the Defense Center. 
Deregistered connections show a failed state on the FireAMP Management page and you must delete 
them.

Admin

On the FireAMP Management page, next to the connection you want to delete, click the slider, then 
confirm that you want to either enable or disable the connection.

When you enable a connection, the cloud begins sending events to the Defense Center, including any 
events that occurred while the connection was disabled. The cloud does not send events for disabled 
connections.

Admin

On the FireAMP Management page, next to the connection you want to delete, click the delete icon (

), 

then confirm you want to remove the connection.

The connection is removed and the cloud stops sending events to the Defense Center.