Enabling full disk access on macOS 10.15, macOS 11, and macOS 12 (Forcepoint DLP Endpoint only)

When you install or upgrade Forcepoint DLP Endpoint on an endpoint machine running macOS 10.15 (Catalina), macOS 11 (Big Sur), or macOS 12 (Monterey), you must enable full disk access (FDA) for the following processes:
  • Library/Application Support/Websense Endpoint/DLP/ESDaemonBundle.app
  • Library/Application Support/Websense Endpoint/DLP/Websense Endpoint Helper.app
  • Library/Application Support/Websense Endpoint/DLP/wsdlpd
  • Library/Application Support/Websense Endpoint/EPClassifier/EndPointClassifier
Also, if you install Forcepoint DLP Endpoint v20.12 (or later) or upgrade to v20.12 (or later) on a Mac endpoint machine running macOS 10.x, then upgrade the machine to macOS 11, Forcepoint DLP Endpoint v20.12 (or later) does not work until you enable FDA for the above processes.
You can grant FDA:
  • On individual endpoint machines in System Preferences > Security & Privacy >Privacy. If you are upgrading Forcepoint DLP Endpoint manually on an endpoint machine running macOS 11, the installation prompts you to enable FDA (see step 8 in the procedure above).
  • On multiple endpoint machines by deploying a configuration file through MDM, such as Jamf. For more information, see the Deploying F1E DLP Endpoints on macOS Environments via Jamf Profile Knowledge Base article.