Grant Full Disk Access for Cisco Secure Endpoint on macOS Ventura: Mac

A bug in macOS Ventura is affecting some security apps which rely on Full Disk Access, such as antivirus or anti-malware programs. In Cisco Secure Endpoint this means that it is running in degraded mode and notifies the user via a flashing warning triangle in the application's menu bar icon.

If you recently upgraded your Mac’s operating system to macOS 13 (Ventura) you probably noticed that the menu bar icon for Cisco Secure Endpoint is flashing a triangular “warning” icon.

Action Required warning icon

If you click on the Secure Endpoint menu bar icon you will see that there is an "Action Required: Grant Full Disk Access" message.
You will also notice that it is "Running in Degraded Mode!"

Grant Full Access menu bar selection

If you select “Grant Full Disk Access” from that drop-down menu, you will be taken to the Full Disk Access System Settings of your Mac.
You will also notice that it appears that Secure Endpoint Service and Secure Endpoint System Monitor are already enabled. 

Please follow the steps below to remedy this:

Open System Settings from the dock or under the  (Apple) menu.

Click on Privacy & Security, and scroll down to click on Full Disk Access.

     a) Click once on Secure Endpoint Service and Secure Endpoint System Monitor to select them.
     b) Click the minus button (-) at the bottom left corner of the list to remove the items.

Remove Cisco items from the Full Disk Access Settings

Enter your login credentials if prompted, and click the Modify Settings button.

Prompt for authentication to modify settings

Select Grant Full Disk Access from the Cisco Secure Endpoint menu bar item.

Grant Full Disk Acces from menu bar icon

You may see a “helper window” appear that guides you through the process of granting Full Disk Access to the app. You may close or move this window to the side.

You should also have a window already open to the Full Disk Access settings and you will see that macOS has added Secure Endpoint System Monitor back to the list. Enable the setting by clicking the slider.

Enable Secure Endpoint System Monitor setting

NOTE: The Secure Endpoint Service setting may not immediately appear, but will appear soon after you have enabled Secure Endpoint System Monitor. Enable the setting.

Enable Secure Endpoint Service setting

Once both settings are enabled, you should see a notification banner stating “fault cleared” and the Cisco Secure Endpoint menu bar icon will have stopped flashing the “warning” triangle. 

You can verify the status by clicking on the icon.
Notice that there are no longer any actions required and the "Running in Degraded Mode" no longer appears.

Verify status from menu bar icon

If you have any trouble with these steps please contact WCER Tech Services ( and we will be happy to assist either in person or via a remote support session.

I expect this bug will be addressed soon by either Apple or Cisco, but we felt it was important that you keep your Mac secure.


Keywords:cisco, ventura, enable, warning, menu, flashing, macOS,13, degraded, mode, mac   Doc ID:122179
Owner:Dave P.Group:WCER Technical Services
Created:2022-10-28 10:42 CDTUpdated:2022-12-27 11:03 CDT
Sites:WCER Technical Services
Feedback:  1   0