Trellix ENSM and Skyhigh SCP Compatible Issue on Mac Device

Last updated
Save as PDF

We’re currently investigating an isolated issue where users experience slow speeds and audio/video call drops when using Trellix ENSM version 10.7.10 with Skyhigh SCP version 4.9.4.101 on macOS. While this does not appear to be a widespread problem, Skyhigh Security recommends avoiding this version combination and ensuring SCP processes are bypassed in ENSM until the investigation is completed.

What if the combination is in use?

No action is needed. The issue appears to be environment-specific. This combination was tested during our standard release process, and no change is necessary. For any queries or more information, contact Skyhigh Security Support.

What exactly do I need to Bypass on Trellix ENSM?

Directories:

NOTE: All files and binaries of the below directory must be excluded in your other security products.

/usr/local/McAfee/...

Process:

/usr/local/McAfee/Scp/bin/scpd
/usr/local/McAFee/fmp/bin64/fmpd

Driver:

com.mcafee.kext.MCPDriver

For any assitance to create bypass rules/policy on ENSM, contact Trellix Support