cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Disable Threat Protection in Mac OS

We have Endpoint Security (80.89.0076)  in Mac computers, and users can disable the Threat Protection by selecting "QUIT" in the agent menu.

Is there anyway to prevent it?

Can I set a password to protect agent?

tks

Tags (2)
3 Replies
Admin
Admin

Re: Disable Threat Protection in Mac OS

I think that just quits the UI and not the protection SandBlast Agent provides.

Have you confirmed otherwise?

Re: Disable Threat Protection in Mac OS

It stops all process in the machine after click on QUIT.

Admin
Admin

Re: Disable Threat Protection in Mac OS

User processes are for the UI.

At least on Windows, there are also kernel processes that run (i.e. that won't show in a ps output).

I don't have a Mac with E80.89 handy to check, but even in E80.64, the firewall is still active if I quit the application.

That's because it operates as a kernel module.

I imagine other SBA protections also operate in this manner as well.