Configure Permissions to Enable WatchGuard Endpoint Security in Mac Devices

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product., WatchGuard EPDR This topic applies to the WatchGuard EPDR endpoint security product., WatchGuard EPP This topic applies to the WatchGuard EPP endpoint security product.

This topic explains how to enable system extensions and full disk access for WatchGuard Endpoint Security on Mac devices.

Caution: WatchGuard Endpoint Security will not function properly unless you enable kernel or system extensions and Full Disk Access. Complete these instructions for your macOS version if you receive a 4500 error. For more information, go to WatchGuard Agent – Installation and Upgrade Error Messages.

When you run the app installer on your Mac device, you might get a System Extensions Blocked message that prompts you to enable services and extensions:

• EndpointProtectionService (System Extensions)
• Protection Agent (Full Disk Access)
• NextLoader (Network Extension)
• EndpointProtectionService (Login Item)

Refer to the appropriate section below.

Enable EndpointProtectionService from Login Items (macOS Ventura 13 or higher)

1. Open the WatchGuard Endpoint Security software.
2. In My Alerts, click Allow EndpointProtectionService.

3. In the Login Items dialog box, enable the EndpointProtectionService.app toggle.

Allow System Extension Permission (macOS Catalina 10.15 or higher)

1. Open your product and in My Alerts, click Open Security Preferences Panel.

2. Below System software from application EndpointProtectionService was blocked from loading, click Allow.

In macOS Catalina 10.15, you must click the lock icon before you can click Allow. You are prompted to enter your user password.

In macOS Sequoia 15, when you open the Security Preferences panel, go to Login Items & Extensions and in the Extensions section, click the info icon next to Endpoint Security Extensions to enable the EndpointProtectionService.app.

Enable Full Disk Access for Endpoint Protection Service (macOS Catalina 10.15 or higher)

You must also enable Full Disk Access for the endpoint protection service.

To enable Full Disk Access:

1. Open the WatchGuard Endpoint Security software.
2. In My Alerts, click Open Hard Disk Access Preferences.

3. Enable Protection Agent Service.

4. To reopen the app and apply the changes, click Quit & Reopen.

Enable NextLoader Network Extension (macOS Catalina 10.15 or higher)

If you have macOS protection version v3.00.00 or higher, you must allow the NextLoader network extension.

1. Open the WatchGuard Endpoint Security software.
2. In My Alerts, click Open Security Preferences Panel.

3. Click Open System Settings.

4. To unblock the NextLoader network extension, click Allow.

In macOS Sequoia 15, when you open the Security Preferences panel, go to Login Items & Extensions and in the Extensions section, click the info icon next to Network Extensions to enable the NextLoader.app.

5. In the Filter Network Content dialog box, click Allow.