EPDR and MacOS X

rgoergrgoerg
in WatchGuard EPDR/EDR/EPP

Hi!

Just installed Watchguard EPDR on MacOS 11.6. All service status indicators for that computer are green. EICAR test file is not detected as virus. I can download, save and copy it without being disturbed by EPDR. Could it be possible that EICAR test file is ignored on EPDR on MacOS, since EICAR test file is a Windows executable?

Regards,

Rene Goerg

Comments

  • james.carsonjames.carson Moderator, WatchGuard Representative

    EICAR is just a text string -- you can put it in anything (text file, etc)

    Provided it wasn't actually encoded into an executable and lost its original form, it should in theory still be detected. I'd suggest opening a support case so our team can investigate what happened.

    -James Carson
    WatchGuard Customer Support

Sign In to comment.