10.2 CIS Client for Mac

The CIS client on Mac allows users to preview the files uploaded to the cloud instead of the earlier issue of downloading them to the local storage.

10.2.1 Prerequisite

  • Use the novcifs command line utility to set --block-unmanaged-cis-reads option to “yes”.

  • To install the latest version of CIS Client for Mac 1.1.8, you must uninstall the earlier version of CIS Client for Mac. Section 10.2.3, Uninstalling CIS Client.

10.2.2 Installing CIS Client

macOS Sonoma

To install the CIS client on a macOS Sonoma workstation:

  1. Open the CISClient.pkg installer to launch the package.

  2. Follow the prompt, read the agreement and click Agree to accept the end-user license agreement.

  3. Click Install. The system prompts for administrator credentials; enter the password and click Install Software > OK to begin the installation.

    The CIS client successfully installs within a few seconds.

  4. Click Open System Settings when the system prompts o use a new network extension for CisAgent.

  5. Navigate to Privacy & Security > Details, which prompts for the system password. Specify the password and click Modify Settings.

  6. Turn on the CisAgent switches and click OK.

  7. Click Allow when the system prompts to enable network filtering.

  8. In the Privacy & Security tab, click Full Disk Access.

  9. Turn on the EndpointSecurityExtension and CisAgent switches to provide full disk access.

    Click the + button if you do not see CisAgent listed.

  10. Click Restart to complete the CIS client installation.

macOS Sequoia

To install the CIS client on a macOS Sequoia workstation:

  1. Open the CISClient.pkg installer to launch the package.

  2. Follow the prompt, read the agreement and click Agree to accept the end-user license agreement.

  3. Click Install. The system prompts for administrator credentials; enter the password and click Install Software > OK to begin the installation.

    The CIS client successfully installs within a few seconds.

  4. Click Open System Settings when the system prompts to use a new network extension for CisAgent.

  5. Turn on the CisAgent.app switch to enable the new network extension.

  6. Navigate to System Settings > General > Login Items & Extensions > Endpoint Security Extensions and turn on the CisAgent.app switch to enable endpoint security extension.

  7. In the Privacy & Security tab, click Full Disk Access.

  8. Turn on the CisAgent and EndpointSecurityExtension switches to provide full disk access.

    Click the + button if you do not see CisAgent listed.

  9. Click Restart to complete the CIS client installation.

10.2.3 Uninstalling CIS Client

The steps to uninstall the CIS client on a Mac workstation are as follows:

  1. Run the command:

    sudo sh /Applications/CisAgent.app/Contents/Resources/Uninstall.sh

  2. Restart the Mac workstation.

  3. On restarting the machine, go to Application > right-click on CisAgent > Move to Bin. This prompts for a password. On specifying the password, a confirmation message to remove the system extensions is displayed, click Continue. This cleans up the workstation and uninstalls the CIS client.

  4. After uninstalling the CIS client, ensure to restart the Mac workstation. Otherwise, the workstation would still behave as a managed CIS client (accessing and previewing the files uploaded to the cloud).

10.2.4 Log Details

To view the log messages or activities, do one of the following:

In the console of MAC, search for cisagent.

OR

In the Terminal > enter the following command:

log show --predicate 'processImagePath CONTAINS "CisAgent"' --last 1d > cisclient.log

This saves the past 24 hours of log messages and activities to the cisclient.log file. The --last parameter is customizable, if this parameter is not specified, then all the CIS client log messages and activities are saved to the cisclient.log file.