Allow list limitation for Endpoint protection agent 14.3 RU8 on MacOS

Products

• Endpoint Security
• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection (SEP) agent 14.3.RU8 on MacOS ignores the Allow List exception if it detects duplicate entries in the path exceptions.

Following is the use case example:

• /Users/testUser/home
• /Users/testUser/home/

Above two entries are resolved to the same path, meaning they are exceptions for the same directory. In this case, the agent stops honoring all the exceptions from Allow list policy.

Environment

SEP 14.3 RU8

Resolution

Remove duplicate path exceptions from the Allow List policy for the Mac platform so that all exceptions are effectively honored.