Hostscan dosen't detect Firewall in Mac OS Mojave 10.14

[victornyberg]

After updating one of our Mac OS computers to the latest update Mojave 10.14, Hostscan can't detect the if the Mac firewall is on or not. It did detect it correctly before the new update. Now it doesn't even print anything about the firewall in the cscan.log file, witch it did before.

Information:

Anyconnect 4.6.03049

Hostscan 4.3.05058

Log file before update:

endpoint.device.protection_extension="3.6.11667.2"
endpoint.enforce="success"
endpoint.fw["AppleFW"]={}
endpoint.fw["AppleFW"].exists="true"
endpoint.fw["AppleFW"].description="Mac OS X Builtin Firewall (Mac)"
endpoint.fw["AppleFW"].version="10.13.6"
endpoint.fw["AppleFW"].enabled="ok"
endpoint.av["AppleAV"]={}
endpoint.av["AppleAV"].exists="true"
endpoint.av["AppleAV"].description="Gatekeeper (Mac)"
endpoint.av["AppleAV"].version="10.13.6"
endpoint.av["AppleAV"].activescan="ok"
endpoint.av["SophosAV"]={}
endpoint.av["SophosAV"].exists="true"
endpoint.av["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.av["SophosAV"].version="9.7.4"
endpoint.av["SophosAV"].activescan="ok"
endpoint.av["SophosAV"].lastupdate="39884"
endpoint.av["SophosAV"].timestamp="1533527228"
endpoint.as["AppleAS"]={}
endpoint.as["AppleAS"].exists="true"
endpoint.as["AppleAS"].description="Gatekeeper (Mac)"
endpoint.as["AppleAS"].version="10.13.6"
endpoint.as["AppleAS"].activescan="ok"
endpoint.as["SophosAV"]={}
endpoint.as["SophosAV"].exists="true"
endpoint.as["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.as["SophosAV"].version="9.7.4"
endpoint.as["SophosAV"].activescan="ok"
endpoint.as["SophosAV"].lastupdate="39884"
endpoint.as["SophosAV"].timestamp="1533527228"

Log file after update:

endpoint.device.protection_extension="3.6.11737.2"
endpoint.enforce="success"
endpoint.av["SophosAV"]={}
endpoint.av["SophosAV"].exists="true"
endpoint.av["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.av["SophosAV"].version="9.7.6"
endpoint.av["SophosAV"].activescan="ok"
endpoint.av["SophosAV"].lastupdate="169154"
endpoint.av["SophosAV"].timestamp="1539589021"
endpoint.as["SophosAV"]={}
endpoint.as["SophosAV"].exists="true"
endpoint.as["SophosAV"].description="Sophos Anti-Virus (Mac)"
endpoint.as["SophosAV"].version="9.7.6"
endpoint.as["SophosAV"].activescan="ok"
endpoint.as["SophosAV"].lastupdate="169154"
endpoint.as["SophosAV"].timestamp="1539589021"

As you can see endpoint.fw is missing from the new scan log file.

Anyone that know how to resolve this issue?

Or maybe have a work around witch I can use to detect the firewall in OS 10.14?

[David Castro F. · Accepted solution]

Hello Victor, 

I hope you are doing great,

This happens because the HostScan version you have does not support any firewall in the 10.14 MAC OS version, below you can find the chart with the supported firewalls and versions on the hostScan version you have installed:

macOS Firewall Support Chart for HostScan 4.3.05058
Product Name	Version	Get Version	Enabled	Turn On	Turn Off	Allow App	Block App	Allow Port	Block Port	Language	Marketing Alias Names
Apple Computer, Inc.
Mac OS X Builtin Firewall	10.10.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.11.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.12.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.13.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.3.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.4.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.5.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.6.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.7.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.8.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Mac OS X Builtin Firewall	10.9.x	✔	✔	✔	✔	✘	✘	✘	✘	English
Brian Hill
Flying Buttress	1.4.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Check Point, Inc
Endpoint Security [Firewall]	8.x	✔	✘	✘	✘	✘	✘	✘	✘	English
Eset Software
ESET Cybersecurity Pro	5.x	✔	✔	✘	✘	✘	✘	✘	✘	English
ESET Cybersecurity Pro	6.x	✔	✔	✘	✘	✘	✘	✘	✘	English
F-Secure Corp.
F-Secure Anti-Virus for Mac	17.x	✔	✘	✘	✘	✘	✘	✘	✘	English	F-Secure SAFE for Mac 17.x
F-Secure Client Security for Mac	13.x	✔	✘	✘	✘	✘	✘	✘	✘	English
F-Secure Computer Protection for Mac	17.x	✔	✘	✘	✘	✘	✘	✘	✘	English
FreeBSD
ipfw	x	✔	✔	✔	✔	✘	✘	✔	✔	English
hanynet.com
NoobProof	1.x	✔	✔	✘	✘	✘	✘	✘	✘	English
WaterRoof	1.x	✔	✔	✘	✘	✘	✘	✘	✘	English
WaterRoof	2.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Intego
Flextivity	1.x	✔	✔	✘	✘	✘	✘	✘	✘	English
NetBarrier	10.7.x	✔	✔	✘	✘	✘	✘	✘	✘	English	NetBarrier 2013|Mac Internet Security 2013|Mac Internet Security Premium 2013|Mac Premium Bundle 2013
NetBarrier	10.8.x	✔	✔	✘	✘	✘	✘	✘	✘	English
NetBarrier X4	10.4.x	✔	✘	✘	✘	✘	✘	✘	✘	English
NetBarrier X5	10.5.x	✔	✘	✘	✘	✘	✘	✘	✘	English
VirusBarrier X6	10.6.x	✔	✔	✘	✘	✘	✘	✘	✘	English
McAfee, Inc.
McAfee All Access - Internet Security	3.1.x	✔	✔	✘	✘	✘	✘	✘	✘	English	McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security	3.3.x	✔	✔	✘	✘	✘	✘	✘	✘	English	McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee All Access - Internet Security	3.8.x	✔	✔	✘	✘	✘	✘	✘	✘	English	McAfee Internet Security | McAfee Live Safe - Internet Security
McAfee Desktop Firewall	1.x	✔	✔	✘	✘	✘	✘	✘	✘	English	McAfee Internet Security
McAfee Endpoint Protection for Mac	2.x	✔	✔	✘	✘	✘	✘	✘	✘	English
McAfee Endpoint Security for Mac	10.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Objective Development Soft.
Little Snitch	1.2.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Little Snitch	2.0.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Little Snitch	2.2.x	✔	✘	✘	✘	✘	✘	✘	✘	English
Open Door Networks, Inc.
DoorStop X	1.1.x	✔	✔	✘	✘	✘	✘	✘	✘	English
DoorStop X	2.0.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Symantec Corp.
Norton AntiVirus	11.x	✔	✘	✘	✘	✘	✘	✘	✘	English
Norton Personal Firewall	3.x	✔	✔	✘	✘	✘	✘	✘	✘	English
Norton Security	6.x	✔	✘	✘	✘	✘	✘	✘	✘	English
Norton Security	7.x	✔	✘	✘	✘	✘	✘	✘	✘	English

https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/products-device-support-tables-list.html

The recommended action is to upgrade the hostscan version to HostScan 4.6.0.3051 and proceed to test.

Keep me posted,

Please qualify all of the helpful answers!

Thanks,

David Castro,