Skip to main content
Question

Mac running Endpoint Protection for Mac with Application Protection enabled becomes unresponsive

  • April 15, 2015
  • 7 replies
  • 30 views

Forum|alt.badge.img+16

Just a quick note for any of my fellow compatriots stuck using EPM. McAfee has noted an issue with the current version and 10.10.3.

https://kc.mcafee.com/corporate/index?page=content&id=KB84462

7 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • April 15, 2015

Lovely. Thanks for the heads up. Fortunately, or unfortunately, 10.10.3 has so many other issues for us we aren't ready to get it out there for clients. so we may be OK for the time being.


Forum|alt.badge.img+8
  • Contributor
  • April 15, 2015

Is Application Protection a separate module you have to buy in order to have? I checked the McAfee preferences on my iMac and I don't see that option at all.


Forum|alt.badge.img+16
  • Author
  • Valued Contributor
  • April 15, 2015

If you're using EPO you can disable Application Protection under Policy Catalog:Endpoint Protection for Mac 2.2.0:Application Protection. I'm guessing you just have AP disabled in policy.


mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • April 15, 2015

Yes, its an individual module, along with Desktop Firewall. We're now using all 4 modules with our 10.10 Macs in our environment, so this could potentially impact us. From the KB, it looks at the moment that its limited to Messages and Reminders, both of which are rarely used by our clients. But still... reasons to avoid either 10.10.3, or McAfee, or both. :)


Forum|alt.badge.img+8
  • Contributor
  • April 15, 2015

Thanks guys!


Forum|alt.badge.img+16
  • Valued Contributor
  • April 16, 2015

It looks like you can also just exclude /System/Library/CoreServices to solve the problem. That's probably what we'll end up doing.


Forum|alt.badge.img+16
  • Author
  • Valued Contributor
  • April 22, 2015

FYI This week I was getting a butt load of calls from Tech Ops about weird macintosh performance issues that were mysteriously resolved when they would uninstall EPM (and then get real grumpy when it automagically reappeared). We already had the exclusion in place but I was able to replicate the hanging and opened an SR, support said you need to disable Allow Apple Signed binaries and enter the exclusion, in contradiction to the KB that states do one or the other. We have entered this configuration into ePO and I will be monitoring to see if this resolves the issue.

They did not have an ETA on a resolution.