Manually deploying Forcepoint F1E agents on a Mac endpoint machine

Steps

  1. Mac packages contain a zip file, FORCEPOINT-ONE-ENDPOINT-Mac.zip. Copy FORCEPOINT-ONE-ENDPOINT-Mac.zip to the endpoint machine, then double-click the file.
  2. MacOS automatically creates a directory named “EndpointInstaller,” which contains a file called WebsenseEndpoint.pkg.
  3. If you are deploying a DLP Endpoint package, add the private key file (key.pem) and the certificate file (server.pem) to the EndpointInstaller folder. For more information, refer to the Endpoint SSL Identity document in order to do this.
  4. Double-click WebsenseEndpoint.pkg to start the installation process.
  5. Click Continue, and agree to the license agreement.
  6. Click Install.
  7. Enter a user name and password for a user with administrator rights to install the software.
    The System Extension Blocked option pops up.

    1. Click Open Security Preferences.
      The general section of the Security & Privacy window opens up.

    2. Click the lock to unlock your mac and select Allow.
      The Proxy Configurations message pops up.

    3. Select Allow.

      A confirmation message is shown when the Forcepoint One Endpoint software is successfully installed.

  8. If you are installing Forcepoint DLP Endpoint v21.12 or later on macOS 11 (Big Sur) onwards, you are prompted to enable full disk access (FDA) for 4 new processes:
    1. When the installer opens the prompt, click Open Full Disk Access to open the macOS System Preferences window.
    2. On the Privacy tab, select ESDaemonBundle.app and Websense Endpoint Helper.app.
    3. Click the + button under the list.
    4. Go to Library/Application Support/Websense Endpoint/DLP/, select wsdlpd, then click Open.
    5. Verify that wsdlpd is included in the list and selected.
    6. Click the + button under the list.
    7. Go to Library/Application Support/Websense Endpoint/EPClassifier/, select EndPointClassifier, then click Open.
    8. Verify that EndPointClassifier is included in the list and selected.
    9. Close the Security & Privacy window.
      Note: If you are deploying Forcepoint DLP Endpoint using Jamf, you can enable FDA for these processes using a configuration file. See the Deploying F1E DLP Endpoints on macOS Environments via Jamf Profile Knowledge Base article.
      Note: If you are installing DLP F1E v23.11 or later with Classifier v8.8.1 or later on Windows, a dialog box may display in the event that certain DLLs require an update. The dialog box asks you to close applications before continuing the installation. If this dialog box displays, leave the default option selected (“Automatically close applications...”) and click OK.
  9. To complete the install, restart the endpoint machine.