Symantec would like to access data from other apps popup on macOS devices with the DLP agent

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Endpoint Prevent

Issue/Introduction

You are seeing "Symantec" would like to access data from other apps popup on your macOS devices with the DLP agent installed. After clicking on Allow, the message reappears and you want to get rid of reoccurring popups.

Environment

15.X

16.X

Cause

com.symantec.dlp.CUI requires Full Disk Access permissions.

Resolution

Provide Full Disk Access permissions to com.symantec.dlp.CUI under Privacy & Settings settings. If you are using MDM profiles to give necessary permissions, you may want to use the below settings in your profile:

Identifier: com.symantec.dlp.CUI

Identifier Type: Bundle ID

Code Requirement:

anchor apple generic and identifier "com.symantec.dlp.CUI" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = Y2CCP3S9W7)

App or Service: Allow for SystemPolicyNetworkVolumes, SystemPolicyAllFiles and SystemPolicyRemovableVolumes.