To download a Cisco Secure Endpoint (AMP) installer log into the console and select the Management tab on the left sidebar.

Click Download Connector under the deployment section. This will open the connector download page. 

On the download connector page select the group you would like the device to be placed via the drop-down at the top of the page. The groups shown populates based on the permissions provisioned to your account. Once the group is selected, locate the correct OS package under the Secure Endpoint section, make any necessary adjustments to the options and download your installation packages. 

Please note: If a product version is selected in the OS policy applied to the group, the connector installation package will be for that version. If the OS policy has "None" selected as the product version the connector installation package will be for the most recent released version. ex. if 7.5.2 is selected as the product version in a Windows policy the download connector will make a package for 7.5.2. If None is selected, 8.4.4 (or whichever is the most recent connector release) will be the version within the installation package.