Quarantined Mac devices have high CPU

Products

• Endpoint Detection and Response
• Endpoint Protection
• Endpoint Protection Cloud
• Endpoint Protection with Endpoint Detection and Response
• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

With Symantec Endpoint Protection 14.3 RU9 for Mac, clients can be quarantined by EDR. These Mac Clients may demonstrate high CPU whilst quarantined.

Environment

• SEP 14.3 RU9 Mac Client
• EDR Quarantine
• Symantec Endpoint Security cloud console

Cause

High CPU has been observed due to aggressive re-connection attempts by 3rd party and host operating system services.

Resolution

For customer information only.

Additional Information

There were multiple Apple services causing this, customers need to manage quarantined clients with this expectation.