topic Re: m_agent Events access in Endpoint Security

m_agent Events access

anwar.diedericks — Wed, 22 Jun 2022 16:22:55 GMT

Hi there,

Can anyone confirm if m_agent on MacOS requires any System Extension permissions to be added. We're seeing the below popup when pushing a notification to devices that have m_agent privacy permissions already configured for accessibility, full disk access and screen record.

Re: m_agent Events access

matmorg2 — Wed, 22 Jun 2022 18:14:40 GMT

macOS devices should get a profile (automatically) called "Meraki Agent Settings for {network_name}". This profile contains all the appropriate Privacy Preferences Policy Control (PPPC) settings for the SM agent to function. First check and see if this profile is installed or not, you should see it installed locally in the Systems Preferences app on macOS, or in the Profile List in Dashboard. If this profile is installed fine but not enabling these permissions, please open a support case and share the example device + SM agent version. Also, if there's a specific action (such as send notification) causing this prompt, please share it in the support case for further review. Thank you!

Re: m_agent Events access

anwar.diedericks — Wed, 22 Jun 2022 19:27:12 GMT

We're seeing a similar issue onboarding Sophos onto the end user's machine our process if manual.
1. Enroll via enrollment string

2. Wait for PPPC to be pushed to the machine
3. Install Sophos

Once we install Sophos we still get a message like the above for a system extension that's made for Network Filtering even though we've added it to System Extension config in profiles

Re: m_agent Events access

anwar.diedericks — Wed, 29 Jun 2022 10:48:00 GMT

You are 100% correct, we had a few causes where the above popup appeared. None of those devices have the SM agent policy pushed

Re: m_agent Events access

jeffrogers — Thu, 14 Jul 2022 17:06:32 GMT

Is this profile automatically created in the Meraki Dashboard, or is this something we must create?

I ask because I have a profile in Meraki Dashboard that is named Meraki Agent Settings for ... However, it is a "custom Apple profile" (.mobileconfig).

It's been a while, and I can't remember if this is something I did, or if this just appeared.

We are seeing issues where this profile is installed, but end user is still being prompted to allow.

Re: m_agent Events access

matmorg2 — Thu, 14 Jul 2022 17:34:51 GMT

@jeffrogers the profile for the agent's permissions should be created automatically. If you're not seeing that: make sure the device is enrolled with the MDM profile (not just the agent), and using a newer version of the agent (anything over 3.1.X should be good) which can be set in SM > Configure > General. After that, the agent's permission profile should be installed from SM automatically on macOS devices.

Re: m_agent Events access

Richard_W — Thu, 01 Aug 2024 15:49:54 GMT

So why am I still not able to control via remote access/screenshot without the screenshot from above. I posed this question to support and they stated that I had to deploy my own PPPC and that @matmorg2 was incorrect in his statements. Any solutions?