(Manual) Installing the agent for Web Security

This section outlines the steps to manually install the Forcepoint Agent on a macOS endpoint system for Web Security Proxy Connect (PCEP) or Direct Connect (DCEP) with no existing agent installations.

Steps

  1. Obtain the installation package and unzip.

    The zip file contains:

    • WebsenseEndpoint.pkg
    • manifest.json
  2. For Web Security PCEP installations, obtain the Forcepoint Cloud CA certificate:
    1. Go to the Forcepoint Cloud Security Gateway portal.
    2. Select the policy from Account > Policies, and then click Web Categories.
    3. Click Forcepoint LLC root certificate(s), and save the certificate.

  3. Double-click WebsenseEndpoint.pkg, then click Allow.
  4. To begin the installation, click Continue.
  5. In the license agreement notification that appears, click Agree.
  6. On the next screen, click Install.
  7. When prompted, enter the admin password and click Install Software:
  8. Click Open System Settings on the following window which opens the windows to enable the Network Extensions:

    Turn on fppnehost and enter the credentials to enable it.
  9. To add proxy configurations, click Allow.
  10. Click Allow to modify apps on your mac and then click Done.

    A message appears to enable full disk access to the required files.

  11. Click Open Full Disk Access.
  12. On the Full Disk Access tab enable the following applications:
    Application Path
    ESDaemonBundle Library/Application Support/Websense Endpoint/DLP/ESDaemonBundle.app
    AEserver Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/Support/AEServer
    FPEPAgent Library/Application Support/Websense Endpoint/Cloud/FPEPAgent
    F1EHelper Library/Application Support/Websense Endpoint/F1E/F1E Helper.app
    Websense Endpoint Helper Library/Application Support/Websense Endpoint/DLP/Websense Endpoint Helper.app
    wepsvc Library/Application Support/Websense Endpoint/DLP/wepsvc
    service Library/Application Support/Websense Endpoint/Cloud/Service
    MBBroker Library/Application Support/Websense Endpoint/Cloud/MBBroker
  13. Once the agent is successfully installed, open the Keychain Access application, and trust the localhost certificate Forcepoint F1E NP Root CA and the Forcepoint Cloud CA certificate:
    1. Double-click the localhost certificate, Forcepoint F1E NP Root CA, and then select Always Trust for all.

    2. Double-click the Forcepoint Cloud CA certificate, and then select Always Trust for all.
      Note: If the Forcepoint Cloud CA certificate does not appear in the Keychain Access application, you will need to add it manually. Download the certificate from the Forcepoint Cloud Security Gateway portal (as described in Step 2) and then drag it into the System > Certificates tab of Keychain Access before proceeding with trusting it.