Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Deploying Cortex XDR Agent for macOS with VMware Workspace ONE (AirWatch)

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Deploying Cortex XDR Agent for macOS with VMware Workspace ONE (AirWatch)

L0 Member

In order to deploy the Cortex XDR Agent to macOS you have to have both the Config.xml and Cortex XDR.pkg files bundled in the same deployment file. Workspace ONE does not support the uploading/deployment of a .zip file so you have to use a workaround. 

 

Cortex XDR Agent Application:

1. You will first need to pull the Cortex XDR Uninstaller out of the folder.

2. Open Disk Utility

3. Go to File > New Image, then choose Image from Folder... 

4. Select the Cortex XDR folder with just the Config.xml and Cortex XDR.pkg contained inside. (Having the uninstaller in the folder will cause it to fail on deployment) 

5. Enter your filename and where to save it. Encryption = none, Image Format = Compressed. 

6. New .dmg containing the necessary files will be created. Upload this to Workspace ONE for deployment. 

Configuration: 

You can use this guide and create your own profile for deployment. Alternatively, you can download the configuration file and import it to Workspace ONE using the Workspace ONE mobileconfig Importer

 

After deployment the end user will still be prompted saying that System Extensions are needed and a few other pop up prompts. Just select "OK" on all of those and everything will begin syncing and functioning as it should. 

 

Links:

https://support.apple.com/guide/disk-utility/create-a-disk-image-dskutl11888/mac

https://docs.paloaltonetworks.com/cortex/cortex-xdr/7-2/cortex-xdr-agent-admin/cortex-xdr-agent-for-...

https://flings.vmware.com/workspace-one-mobileconfig-importer

 

 

 

5 REPLIES 5

L4 Transporter

Incredible!

Visit our Cortex XDR Customer Corner on Live Community to access resources for your product journey, engage in discussions with community members and subject matter experts, and register for upcoming events!

*Cortex XDR Customer Corner: https://live.paloaltonetworks.com/t5/cortex-xdr-customer-corner/ct-p/Cortex_XDR_Customer_Corner

Join our Cortex XDR Office Hours to receive live guidance and training from our Customer Success Architects.

*Cortex XDR Office Hours [NAM]: https://paloaltonetworks.zoom.us/webinar/register/3316669859020/WN_yMpAB-aBTt6xk2h-gsra4w
*Cortex XDR Office Hours [EMEA/APAC]: https://paloaltonetworks.zoom.us/webinar/register/4116709604301/WN_CZuFE5CHQbG9LUEqugsIOw

L0 Member

If I try to test the DMG installation I get the message "Agent tampering protection is enabled."

L0 Member

You can use this guide and create your own profile for deployment.

 

The link mentioned is not working anyone with the steps please guide me.

 

Thanks, in advance.

 

Community Team Member

Hi @Prabodh_Ghule ,

 

How about this link:
https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.7/Cortex-XDR-Agent-Administrator-Guide/Insta...

 

Kind regards,

-Kim.

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Hi @kiwi, thank you for your response.

 

The link is perfect.

  • 5245 Views
  • 5 replies
  • 3 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!