topic Cisco AMP on Big Sur: deploy without Network Extension in Endpoint Security

Cisco AMP on Big Sur: deploy without Network Extension

p.costa — Tue, 29 Jun 2021 09:13:31 GMT

Hi Cisco Community,

do you know if there is some way of deploying Cisco AMP without enabling the Network Extension that does traffic inspection?

We are having some compatibility issues with a printing software, and if we disable the Network Extension everything works correctly.

Since these issues are blocking a deploy on more than 2000 MacOS, we would like to understand if it's possible to easily deploy AMP without any kind of Network Extension, so at least we have ClamAV protection.

Many thanks!

Re: Cisco AMP on Big Sur: deploy without Network Extension

Troja007 — Tue, 29 Jun 2021 13:43:21 GMT

Hello @p.costa,
which version of the connector are you using? We recently released version, so i´m just wondering if version 1.15.5 is solving some network issues.
Greetings,
Thorsten

Re: Cisco AMP on Big Sur: deploy without Network Extension

p.costa — Tue, 29 Jun 2021 13:49:50 GMT

Hi Thorsten,

thanks for the suggestion, we have also updated to 1.15.5.837, but unfortunately the issue is still there.

We are troubleshooting with TAC at the moment, but I wanted to check if I can find a workaround in the meantime.

Best Regards,

Pier

Re: Cisco AMP on Big Sur: deploy without Network Extension

p.costa — Wed, 30 Jun 2021 13:38:05 GMT

We found a workaround apparently.

If we disable completely the network inspection on the policy through the AMP dashboard, and do a REBOOT of the affected machine, we are now able to print.

Re: Cisco AMP on Big Sur: deploy without Network Extension

Troja007 — Wed, 30 Jun 2021 16:37:34 GMT

Hello @p.costa,
good to hear that you have found a workaround, bad to heard that Secure Endpoint impacts the functionality of your endpoints.
Would it be possible to share the TAC case with me (PM), so i can take a look and also talking to engineering?
Thanks, Thorsten

Re: Cisco AMP on Big Sur: deploy without Network Extension

DaphneG — Wed, 30 Jun 2021 18:03:04 GMT

@p.costa our Mac engineering department has already been notified. TAC will relay the updates as soon as we have it. Sorry for the inconvenience.

Re: Cisco AMP on Big Sur: deploy without Network Extension

p.costa — Wed, 30 Jun 2021 18:46:34 GMT

Thanks, PM sent!

Re: Cisco AMP on Big Sur: deploy without Network Extension

p.costa — Wed, 30 Jun 2021 18:47:02 GMT

Thank you @DaphneG !!!