iOS application inventory populates with app sync disabled

Products

• Endpoint Security Complete
• Endpoint Security

Issue/Introduction

When working with UEM settings for a Microsoft Intune integration in the ICDm, it is observed that if the app sync toggle is disabled, iOS and iPadOS devices will still populate their application inventory upon enrollment.  With app sync disabled, expected behavior would be for iOS application inventory to remain blank.

Environment

iOS and / or iPadOS devices managed by Intune, running the SEP Mobile app and enrolled in ICDm.  The SEP Mobile app cannot natively obtain application inventory on an iOS or iPadOS device, and is reliant on app sync data via MDM integration to populate this list.  

Cause

A defect in the app sync toggle for the Intune UEM integration was identified as the cause of this issue.  

Resolution

The 2.0.5 ICDm refresh included a fix for this issue; this release completed rolling out to all ICDm datacenters on Feb 20th, 2025.  iOS or iPadOS devices enrolled following this release will not have their application inventory populated if the app sync toggle is set to disabled.  For devices enrolled prior to the release of this fix, if the presence of the application inventory presents a concern then reenrollment is recommended.  

Additional Information

Synchronizing Unified Endpoint Management (UEM)
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-security/sescloud/Integrations/unified-endpoint-management-v131977090-d4155e1035/synchronizing-unified-endpoint-management-uem.html