'You are at Risk' pop-ups when both Endpoint Protection and Cisco AnyConnect are approved to filter network content on macOS 11

Products

• Endpoint Protection

Issue/Introduction

After installing both Cisco AnyConnect version 4.9.x and Endpoint Protection 14.3 RU1 Mac Agent to macOS 11, the 'You are at Risk' pop-up occurs approximately every 10 minutes. When you click Finish Setup, you are prompted to Allow the Endpoint Protection agent to Filter Network Content again. After approving the network extension, the pop-ups continue to occur.

Both products require approval to filter network content which seems to lead to a condition causing the repeated pop-up from the Endpoint Protection product.

The Cisco AnyConnect product does not need to be connected, but just installed and present alongside the Endpoint Protection Mac agent. Both products need to have approval to Filter Network Content for this issue to occur.

Environment

• macOS 11 Big Sur
• Endpoint Protection Mac agent 14.3 RU1
• Cisco AnyConnect 4.9.04043, version 4.9.04053 and 4.9.05042

Resolution

This issue is fixed in Symantec Endpoint Protection (SEP) 14.3 RU1 MP1 . For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.