search cancel

SEP for MAC may be damaged by Carbon Black kernel Extension presence

book

Article ID: 241044

calendar_today

Updated On:

Products

Endpoint Protection Endpoint Security Endpoint Security Complete Endpoint Protection Cloud

Issue/Introduction

During the installation of SEP for MAC you may not successfully install the kernel EXTENSTION for the network IPS filter for SEP.  

You will not receive any reports of this error during the install, or after the install and the SEP install log will show ''successful'' deployment.

After install however you will begin to get repeated ''You are at risk!'' warnings from the MAC operating system.  Pressing the fix feature or a reinstall does not resolve the error.

Cause

This is still under investigation and has not reached a root cause determination.  As this investigation progresses this KB will be updated.

Environment

MAC OS 12.x on INTEL or ARM based cpu's only.

Resolution

This is still under investigation and has not reached a root cause determination.  As this investigation progresses this KB will be updated.

However, as a work around one customer reported that installing SEP first,  then Carbon Black second allows for both kernel extensions to operate normally.