Enabling full disk access on macOS

For Forcepoint DLP Endpoint agents, you must enable full disk access for certain processes in your mac OS.

When you install or upgrade Forcepoint DLP Endpoint on an endpoint machine running macOS 13 (Ventura), macOS 14 (Sonoma), and macOS 15 (Sequoia), you must enable full disk access (FDA) for the following processes:

  • Library/Application Support/Websense Endpoint/DLP/ESDaemonBundle.app
  • Library/Application Support/Websense Endpoint/DLP/Websense Endpoint Helper.app
  • Library/Application Support/Websense Endpoint/DLP/wsdlpd
  • Library/Application Support/Websense Endpoint/EPClassifier/EndPointClassifier
Also, if you install Forcepoint DLP Endpoint v20.12 (or later) or upgrade to v20.12 (or later) on a Mac endpoint machine running macOS 10.x, then upgrade the machine to macOS 11. Forcepoint DLP Endpoint v20.12 (or later) does not work until you enable FDA for the above processes.
You can grant FDA:
  • On individual endpoint machines in System Preferences > Security & Privacy > Privacy. If you are upgrading Forcepoint DLP Endpoint manually on an endpoint machine running macOS 11, the installation prompts you to enable FDA.
  • On multiple endpoint machines by deploying a configuration file through MDM, such as Jamf. For more information, see Deploying the endpoint package through Jamf in the Forcepoint F1E Install Guide.