9.2 CIS Client for Mac

The CIS client on Mac allows users to preview the files uploaded to the cloud instead of the earlier issue of downloading them to the local storage.

9.2.1 Prerequisite

Ensure the --block-unmanaged-cis-reads option is set to “yes” by using the novcifs command line utility.

NOTE:Only the administrators can modify this option on the OES server.

9.2.2 Installing CIS Client

MacOS Sonoma

The following are the steps to install the CIS client on a MacOS Sonoma workstation:

  1. Open the CISClient.pkg installer to launch the package.

  2. Read the introduction, then click Continue.

  3. Click Continue, then Agree to accept the end-user license agreement.

  4. Click Install. It prompts for administrator credentials; enter the password and click Install Software > OK to begin the installation.

    In a few seconds, the client is successfully installed.

  5. You are prompted with a “System Extension Blocked” message. Click on the Open System Settings button.

  6. Click the Privacy & Security tab and click Details, which prompts for the system password. Specify the password and click Modify Settings.

  7. Select both the CisAgent and click OK.

  8. Click Allow to enable network filtering.

  9. In the Privacy & Security tab, click Full Disk Access.

  10. Select EndpointSecurityExtension and CisAgent. If CisAgent is not listed, then click the + button to add it.

  11. For the configuration changes made to the CIS client to take effect, click Restart on installer window.

MacOS Ventura

The following are the steps to install the CIS client on a MacOS Ventura workstation:

  1. Open the CISClient.pkg installer to launch the package.

  2. Read the introduction, then click Continue.

  3. Click Continue, then Agree to accept the end-user license agreement.

  4. Click Install. It prompts for administrator credentials; enter the password and click Install Software > OK to begin the installation.

    In a few seconds, the client is successfully installed.

  5. You are prompted with a “System Extension Blocked” message. Click on the Open System Settings button.

  6. Click the Privacy & Security tab and click Details.

  7. Specify the password and click Unlock.

  8. Select both the CisAgent and click OK.

  9. Click Allow to enable network filtering.

  10. In the Privacy & Security tab, click Full Disk Access.

  11. Select EndpointSecurityExtension and CisAgent. If CisAgent is not listed, then click the + button to add it.

  12. Specify the password and click Unlock.

  13. For the configuration changes made to the CIS client to take effect, click Restart.

9.2.3 Uninstalling CIS Client

The steps to uninstall the CIS client on a Mac workstation are as follows:

  1. Run the command:

    sudo sh /Applications/CisAgent.app/Contents/Resources/Uninstall.sh

  2. Restart the Mac workstation.

  3. On restarting the machine, go to Application > right-click on CisAgent > Move to Bin. This prompts for a password. On specifying the password, a confirmation message to remove the system extensions is displayed, click Continue. This cleans up the workstation and uninstalls the CIS client.

  4. After uninstalling the CIS client, ensure to restart the Mac workstation. Otherwise, the workstation would still behave as a managed CIS client (accessing and previewing the files uploaded to the cloud).

9.2.4 Log Details

To view the log messages or activities, do one of the following:

In the console of MAC, search for cisagent.

OR

In the Terminal > enter the following command:

log show --predicate 'processImagePath CONTAINS "CisAgent"' --last 1d > cisclient.log

This saves the past 24 hours of log messages and activities to the cisclient.log file. The --last parameter is customizable, if this parameter is not specified, then all the CIS client log messages and activities are saved to the cisclient.log file.