Request to disable User Cancel pop-up on Mac endpoints

Products

• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Endpoint Suite

Issue/Introduction

Due to a recent updates in DLP, Endpoint Prevent now supports the User Cancel response rule on macOS endpoints. The Endpoint Prevent: User Cancel response rule action displays a time-sensitive notification on macOS endpoints to the user when a policy is violated.

The Mac users only have 10 seconds to respond to the User Cancel pop-up.
If the users fail to respond within the 10 second ESF limit, the file upload is blocked if the policy is configured to block.

The 10 second limit is imposed by Apple with their Endpoint Security Framework (ESF) timeout.
This timeout over-rides the timeout value set for the User Cancel pop-up notification, by default it is 60 seconds.

The request is to have an option to disable the User Cancel on the Mac endpoints.

Resolution

The option to disable the User Cancel action on the Mac will be added in a post 16.1 release.