Microsoft Defender for Endpoint no longer supports macOS 11 (Big Sur) and 12 (Monterey).

What's new in Microsoft Defender for Endpoint on macOS
06/27/2025

Known issues

• Apple fixed an issue on macOS Ventura upgrade and macOS Sonoma upgrade with the latest OS update. The issue impacts Defender for Endpoint security extensions, and might result in losing Full Disk Access Authorization, impacting the ability of Defender for Endpoint to function properly.
• In macOS Sonoma 14.3.1, Apple made a change to the handling of Bluetooth devices that impacts Defender for Endpoint device control's ability to intercept and block access to Bluetooth devices. At this time, the recommended mitigation is to use a version of macOS earlier than 14.3.1.
• In macOS Sequoia (version 15.0), if you have Network Protection enabled, you might see crashes of the network extension (NetExt). This issue results in intermittent network connectivity issues for end users. Upgrade to macOS Sequoia version 15.1 or newer.
• On macOS Sequoia (Version 15.0 - 15.1.1), users might encounter prompts about incoming network connections from applications when the native firewall is active.

If an end user encounters a prompt for Defender for Endpoint on macOS processes such as wdavdaemon_enterprise or Microsoft Defender Helper, the end user can safely choose the Deny option. This selection doesn't affect Defender for Endpoint's functionality. Enterprises can also add Microsoft Defender to allow incoming connections. This issue is fixed in macOS Sequoia 15.2.

Sequoia support

• Microsoft Defender for Endpoint supports version 15.0.1 or newer.

macOS Deprecation

• Microsoft Defender for Endpoint no longer supports macOS 11 (Big Sur) and 12 (Monterey).