How to Install CrowdStrike Falcon on Mac OS X Catalina with Jamf Pro

Installing CrowdStrike Falcon on Mac OS X Catalina can be a complex process, but it's essential for securing user devices in your organization. In this article, we'll walk you through the step-by-step process of installing CrowdStrike Falcon using Jamf Pro.

Initial Setup

Before proceeding, make sure to create two policies: one for all Mac OS X Catalina devices and another for every other operating system. Use a smart group to narrow down your scope to only include Catalina devices and apply the corresponding policy to them.

Socket Filter Designated Requirement

In the configuration policy for all Mac OS X Catalina devices, you'll need to set up the following requirements:

* `Identifier`: Leave this blank

* `Anchor Apple Generic`: Select this option

* `Certificate 1` and `Certificate Leaf`: Set these values to `'X9E956P446'`

Create a New Configuration Policy

In Jamf Pro, create a new configuration policy for all Mac OS X Catalina devices. In the `General` tab, set the following:

* `Approved Kernel Extensions`: Enable this option

* `System Extension Type`: Set this to `Allowed System Extensions`

* `Allowed System Extensions`: Select this option

* `Display Name`: Set a descriptive name for your policy

Upload Plist

In the upload section of Jamf Pro, set up a `.plist` file with the following settings:

* `Privacy Preferences Policy Control App Access`

* `Code Requirement`: Leave this blank

* `Anchor Apple Generic`: Select this option

* `Certificate 1` and `Certificate Leaf`: Set these values to `'X9E956P446'`

Jamf Pro Configuration

To install CrowdStrike Falcon using Jamf Pro, you'll need to create a new configuration policy for all devices. In the `General` tab of the policy, set the following:

* `SystemPolicyAllFiles`: Enable this option

Challenges and Workarounds

Unfortunately, installing CrowdStrike Falcon with Jamf Pro isn't without its challenges. The recommended policy provided by Crowdstrike didn't work well for us, requiring users to click on a pop-up to initiate the installation process. This isn't ideal, as not all users may be present at their computer when the push is initiated.

Jamf's support team was helpful in providing some steps to help with the install, but they don't officially support CrowdStrike Falcon. We had to bang our heads against the desk several times to figure out what was going on with their recommended policy!

Installing CrowdStrike Falcon on Mac OS X Catalina using Jamf Pro can be a complex process, but it's essential for securing your users' devices. By following these steps, you'll be able to successfully install CrowdStrike Falcon on all your systems using Jamf Pro.

Remember to create two policies: one for all Mac OS X Catalina devices and another for every other operating system. Use a smart group to narrow down your scope to only include Catalina devices and apply the corresponding policy to them. With careful planning and attention to detail, you'll be able to keep your users' devices secure with CrowdStrike Falcon.

Crowdstrike falcon mac install