Recent updates to this article:
| Date |
Update |
| February 9, 2021 |
In the table:
- Updated McAfee Client Proxy 4.0 availability
- FAQ
|
| January 22, 2021 |
In the table:
- Updated McAfee Client Proxy version to 4.0 and Data Loss Prevention Endpoint version to 11.6.0.46.
- Updated "MVISION Release Status" column for all products.
|
| December 3, 2020 |
Changed the Endpoint Security for Mac Adaptive Threat Protection MVISION release status from expected in December to expected in 2021. |
| November 12, 2020 |
Updated that McAfee Client Proxy 4.0 is in Beta and is expected to release as General Availability in January 2021. Also, changed 'macOS Big Sur 11.0.x' to 'macOS 11.0 Big Sur'. |
| November 10, 2020 |
Initial publication. |
To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.
System extensions and kext-less
macOS Catalina introduced system extensions in 2019. System extensions allow third-party solutions to extend the functionality of macOS and access system events without having to load custom kernel extensions (
kext-less). With system extension drivers now providing APIs that can be accessed in the user space, third-party solutions can no longer compromise the security and stability of the platform. Now with the release of Big Sur, Apple recommends system extension as the standard for endpoint and network security solutions.
The McAfee kext-less journey
We were the first vendor in the market to introduce
kext-less mode for macOS with Endpoint Security for Mac (ENSM) 10.6 in March 2019. At McAfee, we identified
kext-less as the path for a secure and stable endpoint solution on macOS, at the start of 2019. Later that year, our vision for
kext-less on macOS was justified with Apple announcing system extensions for Catalina. Since the release of ENSM 10.6, most our customers have adopted
kext-less as their preferred mode for ENSM and we have had great feedback for the solution.
The McAfee quest for Big Sur
With Big Sur, endpoint security and network security system extensions are the Apple recommended frameworks for endpoint solution providers. McAfee has followed these developments closely. We have worked with Apple to make sure that our endpoint solutions are engineered to use the functionality provided with system extensions. McAfee endpoint solutions for Big Sur do not have any kernel extensions.
Our solutions have been in Beta since August 2020 and some of the largest enterprises are validating them to meet their highest standards for security and compliance requirements.
Apple silicon support
As Apple plans to move away from Intel silicon, McAfee is committed to making sure that our BigSur supported endpoint solutions function seamlessly on the new Apple silicon.
Our solutions will be tested on the Apple silicon-based Developer Transition Kits provided by Apple. We will support both the Intel and Apple silicon via the Apple Rosetta 2 emulator for a start. As more of the new silicon-based devices hit the market, native support for the new silicon will follow.
McAfee product versions compatible with Big Sur
| McAfee Products |
Version and
Build Number |
On-premises
Release Status |
MVISION
Release Status |
Features Coming Soon |
| Data Loss Prevention Endpoint (DLP Endpoint) |
11.6.0.46 |
General Availability |
Released in December 2020 |
Self-Protection |
| Endpoint Security for Mac (ENSM) Threat Prevention |
10.7.5.163 |
General Availability |
Released in December 2020 |
Self-Protection |
| ENSM Adaptive Threat Protection (ATP) |
10.7.5.125 |
General Availability |
Expected in 2021 |
Self-Protection |
| ENSM Firewall |
10.7.5.193 |
General Availability |
Released in December 2020 |
Adaptive Mode
FTP Inspection
Self-Protection |
| ENSM Web Control |
10.7.5.114 |
General Availability |
Released in December 2020 |
Self-Protection |
| File and Removable Media Protection (FRP) |
5.3.1 |
General Availability |
N/A |
Self-Protection |
| Management of Native Encryption (MNE) |
5.1.1 |
General Availability |
Released in December 2020 |
Self-Protection |
| McAfee Agent (MA) |
5.6.6.290
Hotfix 1 |
General Availability |
Released in September 2020 |
- |
| McAfee Client Proxy (MCP) |
4.0 |
General Availability |
Released February 2021 |
Self-Protection |
| MVISION EDR |
N/A |
Beta |
N/A |
Support for process, file, and network collector events and attributes |
| Engine |
6100 |
Request for a Beta
McAfee has a Beta program for Big Sur on McAfee products. Contact your McAfee representative for information.
To contact Technical Support, log on to the ServicePortal and go to the Create a Service Request page at
https://support.mcafee.com/ServicePortal/faces/serviceRequests/createSR:
- If you are a registered user, type your User Id and Password, and then click Log In.
- If you are not a registered user, click Register and complete the required fields. Your password and logon instructions will be emailed to you.
What is Big Sur?
At WWDC 2020, Apple announced a new macOS, macOS 11.0 Big Sur.
Big Sur is available on both Intel and the new Apple silicon.
How does Big Sur impact ENSM?
With Big Sur, Apple has deprecated several kernel APIs. Apple has made it mandatory for security vendors to use endpoint security and network security system extensions provided by Apple to access system events.
Can ENSM support the Apple system extensions already available for Catalina?
Yes. ENSM 10.7.5 is compatible with Big Sur and uses the Apple system extensions. This version also supports the new framework on the latest Catalina 10.15.6 and later.
Will ENSM support Apple silicon-based devices?
Yes. We are actively engaged with Apple to support McAfee solutions on the new Apple silicon. Apple has not announced the General Availability date for these products.
Apple is releasing a new Apple silicon. Will ENSM continue to support the Intel-based devices?
Yes. ENSM continues to support Intel-based devices and the new Apple silicon.
ENSM would support Big Sur on both Intel and Apple silicon. Does that fact mean I have to maintain separate versions of 10.7.x for each?
No. Customers do not have to maintain separate versions of ENSM 10.7.5 for Intel and Apple silicon devices.
My organization has most our nodes on ENSM 10.6, will I get Big Sur support on 10.6?
No. Although McAfee continues to support ENSM 10.6, Big Sur and Apple silicon support is only available with ENSM 10.7.5 and later.
Do I need to upgrade to ENSM 10.7.5 when upgrading my macOS to Big Sur?
Yes,
Big Sur support is available only with ENSM 10.7.5 and later versions of ENSM.
What about other managed products, do they plan to support Big Sur?
Yes. All macOS products will provide support for Big Sur on both Intel and Apple silicon.
Will DLP Endpoint Mac support Apple silicon-based devices?
Yes. We are actively engaged with Apple to support McAfee solutions on the new Apple silicon. Apple has not announced the General Availability date for these products.
Do I need to upgrade to DLP Endpoint 11.6 when upgrading my macOS to Big Sur?
Yes,
Big Sur support is available only with DLP Endpoint 11.6 and later versions of DLP Endpoint.
What is the minimum supported macOS version for MCP?
Recommended macOS version for MCP 4.0 is Big Sur 11.2. MCP 4.0 can't be installed on Catalina OS. Use MCP 3.2.0 version on Catalina OS.
