Symantec would like to access data from other apps popup on macOS devices with the DLP agent
search cancel

Symantec would like to access data from other apps popup on macOS devices with the DLP agent

book

Article ID: 376415

calendar_today

Updated On:

Products

Data Loss Prevention Core Package Data Loss Prevention Data Loss Prevention Endpoint Prevent

Issue/Introduction

You are seeing "Symantec" would like to access data from other apps popup on your macOS devices with the DLP agent installed. After clicking on Allow, the message reappears and you want to get rid of reoccurring popups.

Environment

15.X

16.X

Cause

com.symantec.dlp.CUI requires Full Disk Access permissions.

Resolution

Provide Full Disk Access permissions to com.symantec.dlp.CUI under Privacy & Settings settings. If you are using MDM profiles to give necessary permissions, you may want to use the below settings in your profile:

Identifier: com.symantec.dlp.CUI

Identifier Type: Bundle ID

Code Requirement:

anchor apple generic and identifier "com.symantec.dlp.CUI" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = Y2CCP3S9W7)

App or Service: Allow for SystemPolicyNetworkVolumes, SystemPolicyAllFiles and SystemPolicyRemovableVolumes.