Security

I'm testing Onguard on Mac and Windows clients and although everything seems to work fine with Windows, the persistent OnGuard client on Mac OS X (10.13) is failing to detect peer-to-peer applications.  I've tried to get it to detect both Filezilla and Cyberduck applications are running, for example, and it continues to give me Healthy posture.  It does correctly detect non-running Antivirus and Firewall states so it appears the agent is otherwise working OK.  Any ideas what might be wrong?  (ClearPass v6.8.2)

I just tested with 10.14.6 and had no issues. I would double check that you are modifying the policy and you have the agent check in after you make the change. The settings are not pushed to the onguard client. The client pulls down the updated scan when it checks in. If that dosent fix it then you might need to open a TAC case so they can look at the logs. 

Thanks Troy.

I tested on a different laptop with 10.14 and the OnGuard agent correctly detects Filezilla, etc. so it appears to be a problem with the earlier 10.13 OS X system.  I didn't appear to have any trouble modifying the policy but double-checked this through logging and in again, rebooting, etc. but this made no difference.

I'll log a TAC case as you suggested.

Regards,

John