Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jose_Ferreira
Explorer

Disable Threat Protection in Mac OS

We have Endpoint Security (80.89.0076)  in Mac computers, and users can disable the Threat Protection by selecting "QUIT" in the agent menu.

Is there anyway to prevent it?

Can I set a password to protect agent?

tks

3 Replies
PhoneBoy
Admin
Admin

I think that just quits the UI and not the protection SandBlast Agent provides.

Have you confirmed otherwise?

Jose_Ferreira
Explorer

It stops all process in the machine after click on QUIT.

PhoneBoy
Admin
Admin

User processes are for the UI.

At least on Windows, there are also kernel processes that run (i.e. that won't show in a ps output).

I don't have a Mac with E80.89 handy to check, but even in E80.64, the firewall is still active if I quit the application.

That's because it operates as a kernel module.

I imagine other SBA protections also operate in this manner as well.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events