Endpoint deployment options
F1A, F1E Proxy Connect, and F1E Direct Connect endpoint versions can be deployed on Windows and Mac operating systems (excluding iOS devices, such as iPhones, iPods, or iPads).
After configuring the endpoint client (as described in the next section), you have the following deployment options:
Windows operating system users
- Download the endpoint installation file for Windows and:
- Push it manually to selected client machines using your preferred distribution method - for example, Microsoft Group Policy Object (GPO).
- (F1E Proxy Connect only) Allow users to download and install the endpoint software themselves from a link that you provide.
- (F1E Proxy Connect only) Deploy the endpoint client to the end users in a web policy directly from the cloud. Each affected user is asked to install the endpoint software on their machine when they start a browsing session. See Endpoint tab.
Mac operating system users
- F1A
- Download the endpoint installation package for Mac. (F1A for Mac is only supported on macOS 11 (Big Sur).)
- Deploy to individual client machines using mobile device management (MDM), such as Jamf, which distributes the installation package to a group of machines and performs the installation on that group.
- F1E Proxy Connect and Direct Connect
- Download the endpoint installation package for Mac on individual client machines and launch the installer by double-clicking the package.
- Remotely install the endpoint client using MDM, such as Jamf, which distributes the installation package to a group of machines and performs the installation on that group.
Users who do not install the endpoint client are authenticated according to the options specified on the Access Control tab for their policy. Single sign-on is used if configured; otherwise the cloud-based service falls back to NTLM identification or basic authentication. Users are prompted to install the endpoint software each time they start a browsing session, until they complete the installation process.