cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1584
Views
5
Helpful
1
Replies

Hostscan dosen't detect Firewall in Mac OS Mojave 10.14

victornyberg
Beginner
Beginner

After updating one of our Mac OS computers to the latest update Mojave 10.14, Hostscan can't detect the if the Mac firewall is on or not. It did detect it correctly before the new update. Now it doesn't even print anything about the firewall in the cscan.log file, witch it did before.

 

Information:

Anyconnect 4.6.03049

Hostscan 4.3.05058

 

Log file before update:

endpoint.device.protection_extension="3.6.11667.2"
endpoint.enforce="success"
endpoint.fw["AppleFW"]={}
endpoint.fw["AppleFW"].exists="true"
endpoint.fw["AppleFW"].description="Mac OS X Builtin Firewall (Mac)"
endpoint.fw["AppleFW"].version="10.13.6"
endpoint.fw["AppleFW"].enabled="ok"
endpoint.av["AppleAV"]={}
endpoint.av["AppleAV"].exists="true"
endpoint.av["AppleAV"].description="Gatekeeper (Mac)"
endpoint.av["AppleAV"].version="10.13.6"
endpoint.av["AppleAV"].activescan="ok"
endpoint.av["SophosAV"]={}
endpoint.av["SophosAV"].exists="true"
endpoint.av["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.av["SophosAV"].version="9.7.4"
endpoint.av["SophosAV"].activescan="ok"
endpoint.av["SophosAV"].lastupdate="39884"
endpoint.av["SophosAV"].timestamp="1533527228"
endpoint.as["AppleAS"]={}
endpoint.as["AppleAS"].exists="true"
endpoint.as["AppleAS"].description="Gatekeeper (Mac)"
endpoint.as["AppleAS"].version="10.13.6"
endpoint.as["AppleAS"].activescan="ok"
endpoint.as["SophosAV"]={}
endpoint.as["SophosAV"].exists="true"
endpoint.as["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.as["SophosAV"].version="9.7.4"
endpoint.as["SophosAV"].activescan="ok"
endpoint.as["SophosAV"].lastupdate="39884"
endpoint.as["SophosAV"].timestamp="1533527228"

 

Log file after update:

endpoint.device.protection_extension="3.6.11737.2"
endpoint.enforce="success"
endpoint.av["SophosAV"]={}
endpoint.av["SophosAV"].exists="true"
endpoint.av["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.av["SophosAV"].version="9.7.6"
endpoint.av["SophosAV"].activescan="ok"
endpoint.av["SophosAV"].lastupdate="169154"
endpoint.av["SophosAV"].timestamp="1539589021"
endpoint.as["SophosAV"]={}
endpoint.as["SophosAV"].exists="true"
endpoint.as["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.as["SophosAV"].version="9.7.6"
endpoint.as["SophosAV"].activescan="ok"
endpoint.as["SophosAV"].lastupdate="169154"
endpoint.as["SophosAV"].timestamp="1539589021"

 

 

As you can see endpoint.fw is missing from the new scan log file.

 

Anyone that know how to resolve this issue?

Or maybe have a work around witch I can use to detect the firewall in OS 10.14?

1 Accepted Solution

Accepted Solutions

David Castro F.
Spotlight
Spotlight

Hello Victor, 

 

I hope you are doing great,

 

This happens because the HostScan version you have does not support any firewall in the 10.14 MAC OS version, below you can find the chart with the supported firewalls and versions on the hostScan version you have installed:

 

macOS Firewall Support Chart for HostScan 4.3.05058
Product Name Version Get Version Enabled Turn On Turn Off Allow App Block App Allow Port Block Port Language Marketing Alias Names
Apple Computer, Inc.
Mac OS X Builtin Firewall 10.10.x English  
Mac OS X Builtin Firewall 10.11.x English  
Mac OS X Builtin Firewall 10.12.x English  
Mac OS X Builtin Firewall 10.13.x English  
Mac OS X Builtin Firewall 10.3.x English  
Mac OS X Builtin Firewall 10.4.x English  
Mac OS X Builtin Firewall 10.5.x English  
Mac OS X Builtin Firewall 10.6.x English  
Mac OS X Builtin Firewall 10.7.x English  
Mac OS X Builtin Firewall 10.8.x English  
Mac OS X Builtin Firewall 10.9.x English  
Brian Hill
Flying Buttress 1.4.x English  
Check Point, Inc
Endpoint Security [Firewall] 8.x English  
Eset Software
ESET Cybersecurity Pro 5.x English  
ESET Cybersecurity Pro 6.x English  
F-Secure Corp.
F-Secure Anti-Virus for Mac 17.x English F-Secure SAFE for Mac 17.x
F-Secure Client Security for Mac 13.x English  
F-Secure Computer Protection for Mac 17.x English  
FreeBSD
ipfw x English  
hanynet.com
NoobProof 1.x English  
WaterRoof 1.x English  
WaterRoof 2.x English  
Intego
Flextivity 1.x English  
NetBarrier 10.7.x English NetBarrier 2013|Mac Internet Security 2013|Mac Internet Security Premium 2013|Mac Premium Bundle 2013
NetBarrier 10.8.x English  
NetBarrier X4 10.4.x English  
NetBarrier X5 10.5.x English  
VirusBarrier X6 10.6.x English  
McAfee, Inc.
McAfee All Access - Internet Security 3.1.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security 3.3.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security 3.8.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee Desktop Firewall 1.x English McAfee Internet Security
McAfee Endpoint Protection for Mac 2.x English  
McAfee Endpoint Security for Mac 10.x English  
Objective Development Soft.
Little Snitch 1.2.x English  
Little Snitch 2.0.x English  
Little Snitch 2.2.x English  
Open Door Networks, Inc.
DoorStop X 1.1.x English  
DoorStop X 2.0.x English  
Symantec Corp.
Norton AntiVirus 11.x English  
Norton Personal Firewall 3.x English  
Norton Security 6.x English  
Norton Security 7.x English  

https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-device-support-tables-list.html

 

The recommended action is to upgrade the hostscan version to HostScan 4.6.0.3051 and proceed to test.

 

Keep me posted,

 

Please qualify all of the helpful answers!

 

Thanks,

 

David Castro,

View solution in original post

1 Reply 1

David Castro F.
Spotlight
Spotlight

Hello Victor, 

 

I hope you are doing great,

 

This happens because the HostScan version you have does not support any firewall in the 10.14 MAC OS version, below you can find the chart with the supported firewalls and versions on the hostScan version you have installed:

 

macOS Firewall Support Chart for HostScan 4.3.05058
Product Name Version Get Version Enabled Turn On Turn Off Allow App Block App Allow Port Block Port Language Marketing Alias Names
Apple Computer, Inc.
Mac OS X Builtin Firewall 10.10.x English  
Mac OS X Builtin Firewall 10.11.x English  
Mac OS X Builtin Firewall 10.12.x English  
Mac OS X Builtin Firewall 10.13.x English  
Mac OS X Builtin Firewall 10.3.x English  
Mac OS X Builtin Firewall 10.4.x English  
Mac OS X Builtin Firewall 10.5.x English  
Mac OS X Builtin Firewall 10.6.x English  
Mac OS X Builtin Firewall 10.7.x English  
Mac OS X Builtin Firewall 10.8.x English  
Mac OS X Builtin Firewall 10.9.x English  
Brian Hill
Flying Buttress 1.4.x English  
Check Point, Inc
Endpoint Security [Firewall] 8.x English  
Eset Software
ESET Cybersecurity Pro 5.x English  
ESET Cybersecurity Pro 6.x English  
F-Secure Corp.
F-Secure Anti-Virus for Mac 17.x English F-Secure SAFE for Mac 17.x
F-Secure Client Security for Mac 13.x English  
F-Secure Computer Protection for Mac 17.x English  
FreeBSD
ipfw x English  
hanynet.com
NoobProof 1.x English  
WaterRoof 1.x English  
WaterRoof 2.x English  
Intego
Flextivity 1.x English  
NetBarrier 10.7.x English NetBarrier 2013|Mac Internet Security 2013|Mac Internet Security Premium 2013|Mac Premium Bundle 2013
NetBarrier 10.8.x English  
NetBarrier X4 10.4.x English  
NetBarrier X5 10.5.x English  
VirusBarrier X6 10.6.x English  
McAfee, Inc.
McAfee All Access - Internet Security 3.1.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security 3.3.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security 3.8.x English McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee Desktop Firewall 1.x English McAfee Internet Security
McAfee Endpoint Protection for Mac 2.x English  
McAfee Endpoint Security for Mac 10.x English  
Objective Development Soft.
Little Snitch 1.2.x English  
Little Snitch 2.0.x English  
Little Snitch 2.2.x English  
Open Door Networks, Inc.
DoorStop X 1.1.x English  
DoorStop X 2.0.x English  
Symantec Corp.
Norton AntiVirus 11.x English  
Norton Personal Firewall 3.x English  
Norton Security 6.x English  
Norton Security 7.x English  

https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-device-support-tables-list.html

 

The recommended action is to upgrade the hostscan version to HostScan 4.6.0.3051 and proceed to test.

 

Keep me posted,

 

Please qualify all of the helpful answers!

 

Thanks,

 

David Castro,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: