Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Anti-Virus Exclusions for Agent (Mac)

App Control: Anti-Virus Exclusions for Agent (Mac)

Environment

  • App Control Agent: All Supported Versions
  • Apple macOS: All Supported Versions

Question

What exclusions are recommended to be added to other security products for the Agent on macOS devices?

Answer

Path/LocationInformation
/Applications/Bit9/Daemon/b9daemonAgent Process
/Applications/Bit9Agent Program Directory
/Library/Caches/com.bit9.agentAgent Data Directory (10.8 and lower)
/Library/Application Support/com.bit9.AgentAgent Data Directory (10.9 and higher)
/System/Library/Extensions/b9kernel.kextAgent Driver (10.8 and lower)
/Library/Extensions/b9kernel.kextAgent Driver (10.9 and higher)
/Applications/Bit9/Agent/appc-es-loader.app/Contents/MacOS/appc-es-loaderAgent System Extension (Big Sur 11.0 and higher)
Bundle ID : com.vmware.carbonblack.appc-es-loader.appc-es-extension

Additional Notes

  • Some vendors require trailing asterisks (*) when entering exclusions. Sub-folders should be included in the exclusions. Please refer to the vendors documentation.
  • The agent is considered a "Real Time" scanner. It also has a self-protection mechanism to mitigate tampering with the agents services or files. It is important to set these exclusions up as interference from other security products can cause inter-operability and performance issues.

Related Content


Labels (1)
Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
3612
Contributors