Enabling full disk access on macOS

For Forcepoint DLP Endpoint agents, you must enable full disk access for certain processes in your mac OS.

When you install or upgrade Forcepoint DLP Endpoint on an endpoint machine running macOS 11.6 - 11.7.9 (Big Sur), macOS 12.0 - 12.7 (Monterey), macOS 13.0 - 13.6.2 (Ventura), and macOS 14.0 - 14.3.1 (Sonoma), you must enable full disk access (FDA) for the following processes:

Library/Application Support/Websense Endpoint/DLP/ESDaemonBundle.app
Library/Application Support/Websense Endpoint/DLP/Websense Endpoint Helper.app
Library/Application Support/Websense Endpoint/DLP/wsdlpd
Library/Application Support/Websense Endpoint/EPClassifier/EndPointClassifier

Also, if you install Forcepoint DLP Endpoint v20.12 (or later) or upgrade to v20.12 (or later) on a Mac endpoint machine running macOS 10.x, then upgrade the machine to macOS 11. Forcepoint DLP Endpoint v20.12 (or later) does not work until you enable FDA for the above processes.

You can grant FDA:

On individual endpoint machines in System Preferences > Security & Privacy > Privacy. If you are upgrading Forcepoint DLP Endpoint manually on an endpoint machine running macOS 11, the installation prompts you to enable FDA.
On multiple endpoint machines by deploying a configuration file through MDM, such as Jamf.