So, we're seeing high CPU utilization from the agent and won't be deploying it in our environment until Symantec sorts out their poorly written sysext, but I did put together a reliable way to install the SEP client and get it authorized: It has different GUI, but shares a lot with the on-prem versions of SEP (that we also use for some internal mac's) Maybe the GUI warning I see is only for the Cloud version? We use the cloud version of SEP, also known as SES. Using the log command from carl ashley/ I see a lot of references to and not so I tried to include both in the PPPC profile. This command (no need for sudo) can run it manually, but behaviour (error above) is the same: /Library/Application Support/Symantec/Silo/MES/LiveUpdate/LUTool I tried to update ,but the GUI does not allow to access (see error message above), so I try to update in the background Will try the tip from to run the update first. I install the cloud version of SEP (14.2 RU2 25, in system info version 9.0.1) and this is what we see after deploying the pkg, and reboot: Same here as We have profiles for PPPC, SEXT and KEXT, fresh 10.15.2 install. What the hell am I doing wrong? :) Hope to hear back from an expert who has overcome this issue :) The Approve Kernel Extensions is also configured for Team ID 9PTGMPNXZ2 and Approved Kerenel Extensions as followed: Identifier "" and anchor apple generic and certificate 1 / exists / and certificate leaf / exists / and certificate leaf = "9PTGMPNXZ2"Īnd having the App or Service set to Allow SystemPolicyAllFiles I have setup the correct PPPC Settings for using Bundle ID 9PTGMPNXZ2 for Symantec Corporation using the Code Requirement below: The SEP Client installs fine but I am constantly getting the cursed System Extension Blocked even though in JAMF I have done all the required Kernel Extension and System Extension Allows for the Configuration Profile. Having major issues with Symantec EndPoint Protection 14.2 RU2 (.2000) and installing onto MacOS Catalina 10.15.x. _extension.endpoint_securityĮnabled active teamID bundleID (version) name enabled active teamID bundleID (version) name įor a full example, using symantecs release for macOS 10.15, the following is populated Hugonaut$ systemextensionsctl list This command will produce the following information regarding system extensions.
To start, the best way I know of to obtain a list of system extensions that are present on the machine via terminal is the following command. Detailed step by step guide using Symantecs system extension as an example since that seemed to be m.Ĭreating this thread for everyone to share new found knowledge, best practices & management tactics all in one place as we venture into a new Kext-Less macOS.Ĭlick Here for a Great Breakdown of System Extensions from Scott Knight
0 kommentar(er)
