14.2 RU2 deployment options for "macos 10.14 or lower" versus "macOS 10.15 or up"

Products

• Endpoint Protection

Issue/Introduction

With the release of 14.2 RU2 (14.2.5323.2000), support was added to Symantec Endpoint Protection (SEP) for the Apple macOS operating system update, 10.15 (Catalina). Based on permission changes introduced by Apple and how the operating system will accept install packages, two different deployment options are now available in the 14.2 RU2 product.

Environment

Apple macOS

Resolution

When exporting or deploying a 14.2 RU2 SEP for Mac client install package via the Client Deployment Wizard, you will be prompted to select one of two configuration options:

1. macOS 10.15 or up
2. macOS 10.14 or lower

If the target computer is running macOS 10.14 or older, you will need to select the "macOS 10.14 or lower" configuration option. By contract, if the target machine is running macOS 10.15 or newer, you will need to select the "macOS 10.15 and up" configuration option.

In situations where the SEP for Mac 14.2 RU2 client install package is assigned to a group for auto-upgrade, it will default to the 10.14 and lower configuration permissions.

Keep in mind that the installer will fail, due to incorrect permissions, if you try to deploy the SEP for Mac install package to an OS version that doesn't match the selected configuration option.

Note: In order to manage a 14.2 RU2 SEP for Mac client, you must upgrade your SEP Manager to 14.2 RU2 first to expose these configuration options in the Client Deployment Wizard.