Full Disk Access for ESET

[AaronE 0]

Hi guys,

Can anyone help me? We use Addigy to manage macOS devices and I have granted full disk access and access to protected files.

The PPPC is pushed to devices before ESET install but after ESET is installed the end-users are still getting asked for FDA.

The notification is stating: ESET Endpoint Security and ESET Real-time file system protection.

I have already approved this using this settings:

ESET Endpoint Antivirus: 

Identifier: com.eset.eea.6

Identifier Type: Bundle ID

Code Requirement: identifier "com.eset.eea.6" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P8DQRXPVLP

App or Service: SystemPolicyAllFiles

Access: Allow
 

ESET Endpoint Security:

Identifier: com.eset.ees.6

Identifier Type: Bundle ID

Code Requirement: identifier "com.eset.ees.6" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = P8DQRXPVLP

App or Service: SystemPolicyAllFiles

Access: Allow

In my System preferences I can only see ESET Real-time file system protection and ESET Management Agent.

Can someone help?

[Rincewind 4]

At a first glance the settings match what is recommend for Jamf (https://support.eset.com/en/kb7324-deploy-eset-endpoint-products-for-macos-using-jamf-pro) so if those are applied correctly the message shouldn't appear IMHO.

I have no experience with Addigy but in the screenshot it shows "Affected policies: No policy contains this item". Are you sure the settings are assigned and deployed (have you waited a full deployment cycle) to the machines?

Alternatively there is a plist configuration profile provided in the help pages:https://help.eset.com/ees_mac/6.10/en-US/install_remote.html

Edited February 19, 2021 by Rincewind

[AaronE 0]

Thanks @Rincewind

I found that document online yesterday and I have proceeded to use the PPPC in the article. I just need to remove ESET from my device and apply the PPPC to see if its works. 

When i deployed the PPPC i created and I got the prompt for Full Disk Access, I clicked on restart and never got the prompt again, which made me believe it was created correctly.

I will update this post once I confirm the Preconfigured PPPC from the link works or not

[Marcos 4,935]

Please find updated deployment instructions at https://help.eset.com/ees_mac/6.10/en-US/install_remote.html

If you need to remove a particular component as a workaround to certain issues, instructions how to do it can be found at https://help.eset.com/ees_mac/6.10/en-US/remote_installation_package.html.

However, we don't recommend removing components as a permanent solution but rather as an interim workaround. We recommend that you contact customer care and report the issues you are having with a particular component. We will do our best to fix the issue(s) if there are no technical obstacles.