McAfee Endpoint Security PPPC

@glennt Glad to hear you got it working

I found out what was causing the install.sh folder/disk mount issue with Big Sur. I have a config profile restriction for Disk Images to require authentication (as requested by my infosec team). Interestingly this profile doesn’t affect Catalina devices though.

What a helpful thread! Thanks for all the tips.

After upgrading to Catalina, we were having fan issues, slowness, computer freezes. We updated McAfee EP 10.6.10 (Prevention & Protection) and McAfee 5.6.6 agent. Checked PPPC as noted above. We also made sure all our other security agents and software was up to date.

Apple pointed out a Kextless article. Once I punched this into a script, the performance was day and night. So far, so good.

I just received EP version 10.7.5, but not the latest agent, so haven't tested the changes in that version.

Hope this helps others... Kext-less mode

@mvu The script linked in one of my posts above (https://www.jamf.com/jamf-nation/discussions/36443/mcafee-endpoint-security-pppc#responseChild209589) shows how to install the McAfee ENS components in kextless mode so you don't have to change modes after installation. It's not applicable to ENS 10.7.5, which has changed to System Extensions.

@sdagley For Catalina 10.15.7 and Big Sur will the the CFS Whitelist, PPPC Whitelist and SEPC Whitelist provided by McAfee be the only needed config profiles to approve the system extensions required by ENS 10.7.5?

@aprild It has been for my installations.

@mario.magnus
Thank you for posting that. For the life of me, I could not get that to work and still don't know why. I had to add a slightly modified script to the postscript section of the pkg that was built and that works like a charm however. Just posting here for anyone else. There are many ways to skin a fish.

Hi Guys

I am still getting these issues after enabling system extensions & PPPC

Upgraded the Agent to 5.6.6 Hotfix 1
Threat-Prevention-for-Mac-10.7.6

For TP, I only had to do SE and PPPC on Big Sur. For prior to Big Sur, you need a kext profile.

For PPPC I just grabbed the one from McAfee I believe.