Cisco AMP (macOS 11+) - Resolving Faults
How to resolve faults that are preventing AMP from running properly.
This article pertains only to macOS 11 and later. If you're running any version of macOS 10, see Cisco AMP (macOS 10) - Resolving Faults instead. You can check which version you have if you're not sure.
After installation, Cisco AMP requires several actions that must be completed manually. Before completing the steps on this page, AMP will notify you that action is required by displaying a flashing exclamation point in its icon near the top right of the screen:
Approve System Extensions
- Open System Preferences using the Apple menu in the top left of the screen.
- Select Security & Privacy.
- Ensure you are on the General tab.
- Click the lock in the bottom left corner of the window and enter your password to allow changes.
- Click Details... next to the line that says "Some system software requires your attention before it can be used."
- Check both boxes for AMP for Endpoints Service and click OK.
- Restart the computer. (You may do this after completing steps in the other sections.)
Grant Full Disk Access
- Open System Preferences using the Apple menu in the top left of the screen.
- Select Security & Privacy.
- Navigate to the Privacy tab.
- In the section on the left side of the window, select Full Disk Access.
- Click the lock in the bottom left corner of the window and enter your password to allow changes. (This may still be unlocked from previous steps.)
- Check the boxes for AMP for Endpoints Service and AMP Security Extension.
Allow AMP to Filter Network Content
To allow AMP to filter network content, simply click Allow when prompted by this popup:
If you do not see this popup, you do not need to take this step.