

These approvals can be granted using the macOS Security & Privacy Preferences on the endpoint, or by using Mobile Device Management (MDM) profiles.

User approval is required on all versions of macOS before either type of extension is allowed to run. On macOS 11, System Extensions replace the legacy Kernel Extensions that are unsupported in macOS 11. The Mac connector uses either System Extensions or legacy Kernel Extensions to monitor system activities, depending on the macOS version.

macOS 10.14, using macOS kernel extensions.Ĭisco Secure Endpoint Mac connector 1.14.1 supports the following macOS versions:.macOS 10.15.0 through macOS 10.15.4, using macOS kernel extensions.macOS 10.15.5 and later, using macOS system extensions.

macOS 11, using macOS system extensions.Refer to the Known Issues section later in this document if MDM cannot be used.Ĭisco Secure Endpoint Mac connector 1.14.0 supports the following macOS versions: MDM profiles must be installed before installing or upgrading the Mac connector to ensure the needed permissions are recognized. It is highly recommended to deploy the Mac connector with an MDM profile that grants the required approvals. Older Mac connectors will not work on this version of macOS. Mac connector 1.14 is required to ensure endpoint protection on macOS 11. Consequently, starting with version 1.14.1, the Mac connector will use legacy kernel extensions instead of system extensions on all versions of macOS 10.15. Apple will be addressing these issues in future releases of macOS 11 but will not be fixing these issues in macOS 10.15. Since the inital 1.14 launch, compatibility issues have been discovered with 3rd party applications on macOS 10.15 Catalina when system extensions are in use.
KINDLE FOR MAC 1.2 INSTALL
The connector will not install Orbital in these unsupported environments regardless of the policy settings. At this time, Cisco Orbital is not supported on M1 Apple silicon machines and is not suppoted on macOS 10.14 Mojave.
KINDLE FOR MAC 1.2 FULL
(Only applicable when Orbital is enabled in policy and with Advantage or Premier Tier.) Refer to the new Cisco Orbital sections of this document for details on granting full disk access manually and by MDM profiles. Cisco Orbital is installed automatically on macOS 10.15 Catalina and macOS 11 Big Sur (on Intel hardware) when enabled in policy. Mac connector verison 1.16 introduces support for Cisco Orbital, requiring user attention to allow full disk access for this extension. Most notably, this connector release includes changes to full disk access approvals and adds support for macOS 11 (Big Sur) System Extensions. Mac connector version 1.14 introduces a number of changes that require user attention. This advisory describes recent changes and steps for administrators to deploy Mac connector 1.14 and later.
