The following steps will provide a short overview about how to setup the Sophos Endpoint Client. HOW TO: Confirm the Endpoint is Protected.BIG SUR EAP: Features Supported in this EAP.BIG SUR EAP: Features NOT supported in this EAP.Registering Existing MacOS Endpoints into the EAP.Just adding this note here in case others find this posting when searching about this issue with the latest EA (E85.30). These instructions worked for me, I was able to reinstall and this time I allowed the firewall filter. This is strange because we don't have the full license for Endpoint Security VPN, but there is no option for Check Point Mobile on macOS and we have always used the full Endpoint Security VPN client with no issues. Anyway, I upgraded to E85.30 EA because I needed the fix in E84.70 for the IP address renewal bug but I also needed the SAML support, so this is the only option available.Īfter what looked like a clean upgrade, any attempt to connect would result in the tunnel being dropped for the error about enforcing firewall policy. I had disabled the firewall extension because we don't use it (deleted it from System Prefs -> Network Settings entirely because it kept getting in this state where the VPN was connected but not traffic was being allowed). I was already running Big Sur, but had installed the custom version of E84.30 that added support for SAML authentication.

Note that it seems to be back in the latest EA for E85.30, but with a twist. TR_FLOW_STEP::TrFirewallStep::EnforceFirewallPolicyOnConnect: EnforcePolicy failed !! CFirewallWrapper::EnforcePolicy: ERROR - initializing firewall CFirewallWrapper::Init: CpfwStartFirewall Failed with error cpfwlib_kernctl_fail CFirewallWrapper::Init: CpfwStartFirewall returned cpfwlib_kernctl_fail CFirewallWrapper::Init: CpfwConnectKext returned cpfwlib_success CFirewallWrapper::Init: CpfwLoadKext returned cpfwlib_success CFirewallWrapper::Init: MACOS init firewall, g_kextPath=/Library/Extensions/cpfw.kext CFirewallWrapper::EnforcePolicy: firewall not initialized, calling init Is this supposed to work with EA E84.30 on Big Sur? I didn't see anything in the release notes that indicated this was an issue. I checked the trac.log and it shows the KEXT is found, loaded OK but then fails trying to start the firewall. I then upgraded to Big Sur (11.1) where I can connect and authenticate OK but then the connection fails with 'Enforce Firewall Policy failed'. Based on the Big Sur EA E84.30 release here I downloaded and installed it over my E82.50 mac os Catalina (10.15) and it worked fine.

Sophos endpoint mac big sur