Reset Search
 

 

Article

KB44783 - Pre-approving Pulse Secure's System Extension/Network Filter policy approval dialog popup when Traffic Enforcement is enabled on MacOS Big Sur via MDM payload

« Go Back

Information

 
Last Modified Date4/13/2021 4:50 PM
Synopsis

Approving Pulse Secure's System Extension/Network Content Filter policy via MDM payload so that when Traffic Enforcement is enabled the user will not be forced to grant approval when launching Pulse Desktop Client 9.1R8.2+ for the first time on MacOS Big Sur.

 

 

Problem or Goal
User-added image
Cause
These approval dialog windows are expected behavior with System Extension introduced in 9.1R8.2; Pulse Desktop Client uses the "Content-filter-provider' entitlement to filter traffic when Traffic Enforcement is enabled on MacOS Big Sur.
Solution
  1. Set up a System Extension policy and use team identifier 3M2L5SNZL8 and approve the following bundle identifiers:
    • net.pulsesecure.firewall.systemextension
  2. Set up a Network Filter policy:
    • payloadtype: com.apple.webbcontent-filter
    • team-identifier: 3M2L5SNZL8
    • SystemExtensionIdentifier: net.pulsesecure.firewall.systemextension
    • FilterType: Plugin
    • FilterGrade: firewall
    • PluginBundleID: net.pulsesecure.Pulse-Secure
    • FilterDataProviderBundleIdentifier: net.pulsesecure.firewall.systemextension
    • FilterDataProviderDesignatedRequirement: certificate leaf [subject.CN] = "Developer ID Application: Pulse Secure LLC (3M2L5SNZL8)" and anchor trusted
    • FilterSockets – true
    • FilterPacketProviderBundleIdentifier: net.pulsesecure.firewall.systemextension
    • FilterDataProviderDesignatedRequirement: certificate leaf [subject.CN] = "Developer ID Application: Pulse Secure LLC (3M2L5SNZL8)" and anchor trusted
    • FilterPackets: true
    • AutoFilterEnabled: false
    • FilterBrowsers: false (should be tried with false in 1st iteration and true in 2nd iteration).

 
Related Links
Attachment 1 
Created ByDmitriy Melk-Karamov

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255