Symantec DLP agent in critical state with status as "Endpoint security client is down"

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention

Issue/Introduction

Symantec DLP agent on MacOS in critical state with status showing as "Endpoint security client is down".

Environment

DLP agent 15.8

Mac OS Big Sur (11.x), can also apply to other versions

Cause

This issue occurs when SEHA app does not have full disk access on the Mac OS machine.

Resolution

Follow the below steps to provide full disk access to SEHA app on Mac OS machines. This will fix the issue and the agent will return back to OK status.

1. Click the Apple logo, and then click System Preferences.
2. Click Security & Privacy.
3. Click the Privacy tab. On the left pane, scroll down and then click Full Disk Access.
4. Click the lock icon so you can make changes on your Mac. A new window will appear. Enter your Mac username and password, and then click Unlock to authorize the changes to be made.
5. Click the "+" button to add an application. A new window will appear.
6. Find the SEHA app in the agent install directory, typically /Library/Manufacturer/Endpoint Agent/SEHA. Select SEHA app and click Open. The app will be added to Full Disk Access.