Browse Docs
ONLINE DOCUMENTATION

Mac Manual Deployment

Installing the Agent

The DefensX Agent installer PKG file contains both Intel and ARM64 binaries in a single package.

  • Click Continue on the Introduction screen.

    mac standalone introduction

  • Click Continue and accept the license terms.

    mac standalone license

  • Enter the Deployment Key copied from the DefensX backend.

    mac standalone deployment key

  • Enter your credentials and click Install Software.

    mac standalone install software

  • Because DefensX installs multiple configuration profiles, macOS will prompt for your credentials a few more times. Once complete, a DefensX Policy profile will appear with a yellow warning notice — this is expected.

    mac standalone policy warning

  • Double-click DefensX Policy and click Install.

    mac standalone policy install

  • Enter your credentials once more to install the profiles.

    mac standalone policy install accept

  • Click Close to complete the installation.

    mac standalone install completed
Tip
 You may need to restart your web browser to enable the DefensX extension.

Enabling the DNS Proxy Network Extension

Starting from v2.4.x, DefensX supports enforcing DNS policies without modifying system interface DNS settings. On MDM-managed devices, the required permissions are granted silently. On non-MDM devices, follow the steps below to enable the extension manually.

  • Click the DefensX tray icon. If you see a warning saying Network Extension: Activation Required, click it to begin the activation process.

    network extension activation required

  • You will be prompted to install the DefensX DNSProxy network extension. Click Open System Settings to continue.

    network extension install

  • Click the toggle next to DefensX DNSProxy under Network Extensions.

    network extension toggle

  • When prompted that DefensX DNSProxy wants to add a DNS Proxy Configuration, click Allow.

    network extension allow dns proxy configuration

After a few seconds, click the DefensX tray icon to confirm the warning is gone and the status shows Network Extension: Enabled.

network extension enabled

You can also verify this by running the scutil --dns command.

user@Luka-Mac-mini ~ % scutil --dns
...
DNS configuration (for scoped queries)
resolver #1
  nameserver[0] : 8.8.8.8
  nameserver[1] : 1.1.1.1
  if_index : 6 (en0)
  flags    : Scoped, Request A records
  reach    : 0x00000002 (Reachable)
Important
 These same steps apply after an automatic upgrade from v2.2.x to v2.4.x. If the extension is not activated, the DefensX Agent will continue operating with the previous model.

Disabling the DNS Proxy Network Extension Deployment-Wide

The DNS Proxy Network Extension can be disabled at the deployment level or per individual agent, similar to the Kernel Driver setting on Windows.

To disable it deployment-wide:

  • Navigate to Policies and locate the deployment where you want to disable the DNS Proxy Network Extension for Mac.

  • Click the Advanced Options gear icon.

  • Find the Enable DNS Network Extension for Mac setting and set it to Disabled.

    disable network extension

To disable it for a single device, use the Agent Options settings on the individual agent.

Installation via Script

Note
 This script is intended only for computers without an MDM solution. It should not be used for MDM-managed devices. After installation, the end user must manually locate and install the required profiles, as described in the GUI installation steps above.

Download DefensX-installer-standalone.sh from the panel on the right. Before running the script, update the DEFENSX_KEY variable with your deployment key:

DEFENSX_KEY="PUT_YOUR_DEPLOYMENT_KEY_HERE"

Once updated, execute the script with administrative privileges to complete the installation.

Uninstalling the Agent

Uninstall via GUI

Run DefensX Uninstaller from the Applications folder and follow the on-screen steps.

Screen%20Shot%202022 07 16%20at%206.36.58%20PM

Uninstall via Terminal

Open Terminal and run the following command. You will be prompted for your sudo password.

sudo installer -pkg /opt/DefensX/DefensX-uninstaller.pkg -target /
Secure Industries, Inc 101 Avenue of The Americas, Floor 9 New York, NY 10013