Is there a way to control Endpoint Protection for Mac using the command line? I'm particularly interested in turning off on access scan.
Using the GUI, I found that it appears that the only change is to OAS_Enable in /Library/Preferences/com.mcafee.ssm.antimalware.plist
But manually changing this value then running /Library/StartupItems/cma/cma restart doesn't seem to update what I see in the GUI.
I haven't been able to find any command line documentation, so just poking around and guessing... 😞
I'm curious as to why you are doing this via the command line, rather through ePO. In the ePO policy you can just uncheck the box, wake up the agent and the OAS will be disabled.
I'm not using ePO, just running EP standalone on a couple dozen MAC workstations, and quite a few more Linux systems. I can get most of my admin tasks done via command line and now looking for how to do that with Endpoint Protection.
I will have to look into this. I have not tried to configure anything via the command line for the Macs. In the meantime you should also be able to disable OAS in the EPM console UI.
Another quesitons if you don't mind me asking. Is why you would want to shut down OAS? If you are having issues, with OAS and another application you can add it to the exclusions in the EPM console UI. I would not exclude it form ODS, just OAS.
Open terminal and run the following command:
sudo /usr/local/McAfee/AntiMalware/VSControl stopoas
Open terminal and run the following commands:
sudo defaults write /Library/Preferences/com.mcafee.ssm.antimalware.plist OAS_Enable -bool False
sudo /usr/local/McAfee/AntiMalware/VSControl stop
sudo /usr/local/McAfee/AntiMalware/VSControl reload