IMPORTANT ANNOUNCEMENT: On May 6, 2024, Carbon Black User eXchange (UeX) and Case Management will move to a new platform!
The Community will be in read-only mode starting April 19th, 7:00 AM PDT. Check out the blog post!
You will still be able to use the case portal to create and interact with your support cases until the transition, view more information here!

App Control: Anti-Virus Exclusions for Agent (macOS)

App Control: Anti-Virus Exclusions for Agent (macOS)

Environment

  • App Control Agent: All Supported Versions
  • Apple macOS: All Supported Versions

Question

What exclusions are recommended to be added to other security products for the Agent on macOS devices?

Answer

System Extensions are used with macOS Agent 8.7.x and higher when installed on macOS 11.x and higher
Path/Location Information
/Applications/Bit9/Daemon/b9daemonAgent Process
/Applications/Bit9/Agent Program Directory
/Library/Application Support/com.bit9.Agent/Agent Data Directory
/Applications/Bit9/Agent/appc-es-loader.app/Contents/MacOS/appc-es-loaderAgent System Extension
Bundle ID: com.vmware.carbonblack.appc-es-loader.appc-es-extension
 
 
Kernel Extensions are used with macOS Agent 8.7.x and lower when installed on macOS 10.15.x and lower
Path/Location Information
/Applications/Bit9/Daemon/b9daemonAgent Process
/Applications/Bit9Agent Program Directory
/Library/Application Support/com.bit9.Agent/Agent Data Directory (10.9 and higher)
/Library/Extensions/b9kernel.kextAgent Driver (10.9 and higher)
/Library/Caches/com.bit9.agent/Agent Data Directory (10.8 and lower)
/System/Library/Extensions/b9kernel.kextAgent Driver (10.8 and lower)

Additional Notes

  • System Extensions are used with macOS Agent 8.7.x and higher when installed on macOS 11.x and higher.
  • Kernel Extensions are used with macOS Agent 8.7.x and lower when installed on macOS 10.5.x and lower.
  • Refer to the vendor's documentation on how to add exclusions for the Agent.
  • The Agent is considered a "Real Time" scanner. It also has a self-protection mechanism to mitigate tampering with the Agent's services or files.
  • It is important to set these exclusions up as interference from other security products can cause stability and performance issues.

Related Content


Labels (1)
Was this article helpful? Yes No
100% helpful (2/2)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
4611
Contributors