Recent updates to this article:
Date |
Update |
October 26, 2022 |
Minor formatting updates. No content changes. |
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
System extensions and kext-less
macOS Catalina introduced system extensions in 2019. System extensions allow third-party solutions to extend the functionality of macOS and access system events without having to load custom kernel extensions (
kext-less). With system extension drivers now providing APIs that can be accessed in the user space, third-party solutions can no longer compromise the security and stability of the platform. Now, with the release of Big Sur, Apple recommends system extension as the standard for endpoint and network security solutions.
Our kext-less journey
We were the first vendor in the market to introduce
kext-less mode for macOS with Endpoint Security for Mac (ENSM) 10.6 in March 2019. We identified
kext-less as the path for a secure and stable endpoint solution on macOS, at the start of 2019. Later that year, our plan for
kext-less on macOS was justified with Apple announcing system extensions for Catalina. Since the release of ENSM 10.6, most of our customers have adopted
kext-less as their preferred mode for ENSM and we’ve had great feedback for the solution.
Our quest for Big Sur
With Big Sur, endpoint security and network security system extensions are the Apple recommended frameworks for endpoint solution providers. We’ve followed these developments closely. We’ve worked with Apple to make sure that our endpoint solutions are engineered to use the functionality provided with system extensions. Our endpoint solutions for Big Sur don't have any kernel extensions.
Our solutions have been in Beta since August 2020 and some of the largest enterprises are validating them to meet their highest standards for security and compliance requirements.
Apple silicon support
As Apple plans to move away from Intel silicon, we’re committed to making sure that our Big Sur supported endpoint solutions function seamlessly on the new Apple silicon.
Our solutions are tested on the Apple silicon-based Developer Transition Kits provided by Apple. We support both the Intel and Apple silicon via the Apple Rosetta 2 emulator for a start. As more of the new silicon-based devices hit the market, native support for the new silicon will follow.
Product versions compatible with Big Sur
Products |
Version and
Build Number |
On-premises
Release Status |
MVISION
Release Status |
Features Coming Soon |
Data Loss Prevention Endpoint
(DLP Endpoint) |
11.6.0.46 |
General Availability |
December 2020 |
Self-Protection |
Endpoint Security for Mac
(ENSM) Threat Prevention |
10.7.5.163 |
General Availability |
December 2020 |
Self-Protection |
ENSM Adaptive
Threat Protection |
10.7.5.125 |
General Availability |
Expected in 2021 |
Self-Protection |
ENSM Firewall |
10.7.5.193 |
General Availability |
December 2020 |
Self-Protection |
ENSM Web Control |
10.7.5.114 |
General Availability |
December 2020 |
Self-Protection |
File and Removable
Media Protection |
5.3.1 |
General Availability |
N/A |
Self-Protection |
Management of
Native Encryption |
5.1.1 |
General Availability |
December 2020 |
Self-Protection |
McAfee Agent |
5.6.6.290 Hotfix 1
(Intel processor)
5.7.x
(Apple and Intel processor) |
General Availability |
September 2020 |
- |
Client Proxy |
4.0 |
General Availability |
February 2021 |
Self-Protection |
MVISION EDR |
N/A |
Beta |
N/A |
Support for process, file, and
Network collector events
and attributes |
Engine |
6100 |
Request for a Beta
We have a Beta program for Big Sur on our products. Contact your representative for information.
- If you are a registered user, type your User ID and Password, and then click Log In.
- If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.
FAQs for our products and Big Sur
What is Big Sur?
At WWDC 2020, Apple announced a new macOS, macOS 11.0 Big Sur.
Big Sur is available on both Intel and the new Apple silicon.
How does Big Sur impact ENSM?
With Big Sur, Apple has deprecated several kernel APIs. Apple has made it mandatory for security vendors to use endpoint security and network security system extensions provided by Apple to access system events.
Can ENSM support the Apple system extensions already available for Catalina?
Yes. ENSM 10.7.5 is compatible with Big Sur and uses the Apple system extensions. This version also supports the new framework on the latest Catalina 10.15.6 and later.
Are there plans for ENSM support Apple silicon-based devices?
Yes. We're actively engaged with Apple to support our solutions on the new Apple silicon. Apple hasn't announced the General Availability date for these products.
Apple is releasing a new Apple silicon. Are there plans for ENSM to support the Intel-based devices?
Yes. ENSM continues to support Intel-based devices and the new Apple silicon.
ENSM would support Big Sur on both Intel and Apple silicon. Does it mean I have to maintain separate versions of 10.7.x for each?
No. Customers don't have to maintain separate versions of ENSM 10.7.5 for Intel and Apple silicon devices.
My organization has most our nodes on ENSM 10.6; can I get Big Sur support on 10.6?
No. Although we continue to support ENSM 10.6, Big Sur and Apple silicon support is only available with ENSM 10.7.5 and later.
Do I need to upgrade to ENSM 10.7.5 when upgrading my macOS to Big Sur?
Yes,
Big Sur support is available only with ENSM 10.7.5 and later versions of ENSM.
What about other managed products? Do they plan to support Big Sur?
Yes. There are plans for all macOS products to have support for Big Sur, on both Intel and Apple silicon.
Will DLP Endpoint Mac support Apple silicon-based devices?
Yes. We're actively engaged with Apple to support our solutions on the new Apple silicon. Apple hasn't announced the General Availability date for these products.
Do I need to upgrade to DLP Endpoint 11.6 when upgrading my macOS to Big Sur?
Yes,
Big Sur support is available only with DLP Endpoint 11.6 and later versions.
What's the minimum supported macOS version for MCP?
The recommended macOS version for MCP 4.0 is Big Sur 11.2. MCP 4.0 can't be installed on Catalina operating system. Use MCP 3.2.0 version on Catalina operating system.