Installing the agent for Hybrid DLP using Jamf

Use the following steps to install the macOS Forcepoint Agent using Jamf in Hybrid DLP mode.

While deploying the agent configuration profile using Jamf, you can automatically obtain the necessary permissions and accessibility to the agent that avoids complicated administrator or user confirmation dialogs. To install the agent using Jamf, do the following:

Steps

  1. Create the endpoint SSL identity.
    The following files are generated:
    • key.pem
    • server.pem
  2. Convert the server.pem file to the .der format using the following openssl command:

    openssl x509 -in server.pem -out server.der -outform DER

  3. Obtain the generate_root_ca tool from here and run in the terminal:
    The _ca.cer certificate and the fpnpd.dat file generates in the installer folder.
  4. Obtain the ca.cer and localconfig.xml files from the DLP manager in FSM, located at C:\Program Files (x86)\Websense\Data Security\client.
  5. Obtain the downloaded agent and unzip the package.
  6. Place the ca.cer and localconfig.xml in the unzipped installer package.
    Note: If using a custom ca.cer with multiple certificates, ensure that the cert and key for the DLP manager are placed first in the ca.cer file and any other certs are place after this.
  7. Create a installer package for Jamf MDM deployment with the following files:
    • fpnpd.dat
    • manifest.json
    • key.pem
    • server.pem
    • WebsenseEndpoint.pkg
    • ca.cer
    • localconfig.xml
  8. Open Jamf Pro and in Computers > Configuration Profiles, deploy the following files through Jamf:
  9. To enroll the machine to the profiles, select the configuration profile file, review the profile in System Settings.
    A message appears for your confirmation to install the profile.
  10. Click Install, and then click Enroll.

    The enrolled profiles will display under the Device (Managed) section in Device Management and the Full Disk Access will be enabled for the following applications configured by the profiles.
    Application Path
    EndpointClassifier Library/Application Support/Websense Endpoint/EPClassifier/EndPointClassifier
    ESDaemonBundle Library/Application Support/Websense Endpoint/DLP/ESDaemonBundle.app
    AEserver Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/Support/AEServer
    FPEPAgent Library/Application Support/Websense Endpoint/Cloud/FPEPAgent
    Websense Endpoint Helper Library/Application Support/Websense Endpoint/DLP/Websense Endpoint Helper.app
    F1EHelper Library/Application Support/Websense Endpoint/F1E/F1E Helper.app
    wsdlpd Library/Application Support/Websense Endpoint/DLP/wsdlpd
    service Library/Application Support/Websense Endpoint/Cloud/Service
    MBBroker Library/Application Support/Websense Endpoint/Cloud/MBBroker
  11. Deploy the package in Jamf.