This describes how to install the Proofpoint Mac Agent / Bundle for ITM /Endpoint DLP on the endpoint(s).
From version 3.6.x, permissions provided manually in Mac Agent deployment are no longer supported. Only remote deployment using an MDM tool, such as JAMF, with the relevant Configuration Profile is supported.
In addition, static and dynamic proxy are supported. (See Mac Agent Proxy Support.)
Mac Bundle Installation Methods
Use one of the following to install the Mac Bundle:
- MDM Deployment to Install/Uninstall the Mac Bundle (JAMF)
- MDM Deployment for the Mac Bundle and Mac Updater VMware Workspace ONE (AirWatch)
- Deploying the Mac Agent Offline
Mac Bundle Installation Files
You need to download the Agent/Bundle installation files for all types of Mac Agent installations (manual and mass deployment like JAMF).
Agent / Bundle Installation Files
observeit-cloudagent-OSX-bundle-<version>.tar.gz is the file you download containing the installation files you will need. Downloaded from Agent Bundle > latest-stable.
This includes:
-
observeit-cloudagent-OSX-<version>.pkg
-
observeit-cloudagent-OSX-bundle-<version>.pkg
-
preinstall
-
preunistall
-
From the Proofpoint Information and Cloud Security Platform, select the Administration app. Select Downloads.
-
In the macOS area, from the Agent Bundle section, select the latest-stable version and click Download to download the observeit-cloudagent<version>.tar.gz file.
-
Download the observeit-cloudagent<version>.tar.gz file and then extract the contents to your desktop or another folder that is easily accessible.
Management Tools - Configuration Files
From Managements Tools, you download the required configuration profiles for Mac Agent/Bundle installation and upgrade using mass deployment such as JAMF.
observeit-OSX-management-tools-<version>.tar.gz is the file you download the configuration profiles you will need. Downloaded from Management Tools. (See Management Tools.)
Configuration Profiles
Use the Configuration Profiles described below:
-
IT Viewer macOS 11.signed.mobileconfig: Configuration Profile signed by Proofpoint
-
IT Viewer macOS 11.mobileconfig: Unsigned Configuration Profile, to be signed by customer
For MDM configuration profile settings see MDM Configuration Profile Settings List.
If you want to make changes to the Configuration Profile, use the version that is not signed. After making changes you must sign the configuration profile before deploying it.
Disabling Login Items Notifications (optional) - supported from macOS Ventura 13 and higher:
-
Ventura Disable Login Items Notifications Sample Profile.mobileconfig: This is a sample configuration profile showing you how to disable all background task management notifications introduced in macOS Ventura (Login Items notifications). You can entirely disable all such notifications by creating a Configuration Profile based on this sample profile. This is a system-wide profile, so if you use it, notifications that were already triggered and that exist within the Notification Center will not display.
Installation Files
Installation Configuration file for the Realm. (See Installation Configuration File.) The. Installation Configuration File is a .json file. You will need this file and you will need to know its location to complete the installation.
Shell Script for the Realm. (See Shell Script for Mac Agent and Auto Updater.) This file contains the installation parameters for the Realm and is used with mass deployment. (You do not need this file if you are using manual installation to a single endpoint.)
Related Topics:
Supported Platforms and System Requirements for ITM / Endpoint DLP