CN - Mac - Install and Use ESET Antivirus for Mac

Introduction

This document is geared towards IT technicians but the steps can also be followed by end-users. If you need assistance, please contact the IS Service Desk.

Overview

ESET Endpoint Antivirus is the chosen antivirus software for deployment on university macOS devices.

ESET was adopted in early 2019, after Microsoft announced that System Center Endpoint Protection (SCEP) would drop support for macOS.

System Requirements

ESET Endpoint Antivirus 6 for macOS is compatible with the following operating systems:

  • macOS 10.15 Catalina
  • macOS 10.14 Mojave
  • macOS 10.13 High Sierra
  • macOS 10.12 Sierra
  • OS X 10.11 El Capitan
  • OS X 10.10 Yosemite
  • OS X 10.9 Mavericks

Installation

Note: The ESET installer is configured to remove an existing installation of SCEP. It's not necessary to uninstall SCEP before installing ESET.

Getting the ESET Installer

  1. Open a new Finder window.
  2. Open the Go menu, and select Connect to Server (⌘K)
  3. In the address bar, enter smb://software.oregonstate.edu/software and click Connect.
    • When prompted, enter your CN admin credentials.
  4. Navigate to Microsoft SCEP/Mac/ESET Antivirus. Copy the installer (extension .pkg) to the Desktop.
  5. Double-click on the installer to run it.
  6. Don't forget to eject the software server in your Finder window before you're done.

Running the ESET Installer

  1. Click Continue to proceed through the README and License Agreement.
  2. Installation Mode:
    • Choose Custom installaiton mode, and click Continue.
    • Uncheck all of the optional modules, and click Continue.
  3. Proxy Settings:
    • Choose Use system settings, and click Continue.
  4. Privileged Users:
    • Click Continue using default settings.
    • NOTE: On domain-bound computers, the installer may freeze for a few minutes on this step.
  5. ESET LiveGrid:
    • From the dropdown menu, choose Disable... and click Continue.

  6. Potentially Unwanted Applications
    • From the dropdown menu, choose Disable... and click Continue.

  7. Click Install.
  8. When prompted, enter credentials for the macadmin account. Wait for installation to finish before moving on to the next section.

System Extension Blocked

By default, macOS will block ESET's kernel extensions until you manually allow them.

You will see two dialogs at the end of the installation process: One from ESET, and one from System Preferences.

  1. Click OK to dismiss the System Preferences dialog.
  2. On the ESET dialog, click Open Security Preferences.
    • Click OK allow ESET to open security settings.
    • The message at the bottom of the window should read System software from developer "ESET, spol. s r.o." was blocked from loading.
    • Click Allow
      • Note to IT technicians: You cannot allow system extensions through a remote session. Ask users to click the button for you.
    • If the option System software from developer "ESET, spol. s r.o." was blocked from loading  does not appear:
      • Use Finder to open Activity Monitor (search activity monitor in spotlight search, if it doesn't show up open Finder and try again).
      • Force quit ESET Endpoint AntiVirus, Security & Privacy, and System Preferences
    • Restart ESET and check if System software from developer "ESET, spol. s r.o." was blocked from loading is now an option to allow.
  3. On the ESET dialog, click Start Again.

Your Computer is not Fully Protected

macOS Mojave introduced extra security features to prevent applications from accessing files and folders on the local disk. To allow ESET to properly scan and quarantine malicious files, you must manually add ESET to the list of applications with Full Disk Access.

Skip this section if you're installing ESET on a version of macOS earlier than Mojave, or ESET doesn't give you this warning.

  1. Click Open System Preferences.
  2. Click the lock in the lower left to make changes. When prompted, enter the macadmin credentials.

  3. From the list on the left, select Full Disk Access.
  4. Click the + button.
    1. In the file dialog, navigate to the Applications folder.
    2. Select ESET Endpoint Antivirus and click Open.
    3. Click Later to dismiss the ESET Endpoint Antivirus will not have full disk access... dialog.
  5. Click the lock in the lower left to prevent further changes.
  6. On the ESET dialog, click Restart.
  7. ESET should relaunch on its own and start running in the background. You can now close System Preferences and the ESET installer.

Uninstallation

See ESET Documentation

Notes

ESET Documentation

Real-Time Protection

ESET uses real-time protection to intercept malicious files and applications so you don't have to schedule active scans of your entire system. By default, all files are scanned upon file opening, file creation, or file execution.

About Real-Time Protection

Checking Real-Time Protection

Details

Article ID: 71824
Created
Mon 2/11/19 4:47 PM
Modified
Fri 5/8/20 3:36 PM