{"id":49623,"date":"2024-10-22T15:43:32","date_gmt":"2024-10-22T15:43:32","guid":{"rendered":"https:\/\/www.applivery.com\/?post_type=docs&#038;p=49623"},"modified":"2025-05-08T11:14:05","modified_gmt":"2025-05-08T11:14:05","password":"","slug":"configure-crowdstrike-falcon-sensor-on-macos-devices","status":"publish","type":"docs","link":"https:\/\/www.applivery.com\/pt-br\/docs\/mobile-device-management\/apple-mdm\/macos\/configure-crowdstrike-falcon-sensor-on-macos-devices\/","title":{"rendered":"Install and configure CrowdStrike Falcon Sensor on macOS"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"49623\" class=\"elementor elementor-49623\" data-elementor-post-type=\"docs\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d586fdb e-con-full e-flex e-con e-parent\" data-id=\"d586fdb\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a19b8a4 elementor-widget elementor-widget-text-editor\" data-id=\"a19b8a4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\"><strong><span class=\"s1\">CrowdStrike Falcon<\/span><\/strong> is a powerful, cloud-native security platform designed to deliver industry-leading antivirus and endpoint protection for macOS and Windows devices. Leveraging cutting-edge technologies such as <strong><span class=\"s1\">artificial intelligence (AI)<\/span><\/strong> and <strong><span class=\"s1\">machine learning (ML)<\/span><\/strong>, Falcon proactively detects, prevents, and responds to threats before they can impact your systems.<\/p><p class=\"p1\">Whether you\u2019re managing a fleet of endpoints or securing a hybrid work environment, CrowdStrike Falcon offers real-time protection, minimal system impact, and robust integration capabilities.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c5c57f elementor-widget elementor-widget-heading\" data-id=\"4c5c57f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Requirements<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-80e10b6 elementor-widget elementor-widget-text-editor\" data-id=\"80e10b6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">To successfully deploy CrowdStrike Falcon on macOS through Applivery, make sure you have the following:<\/p><ul><li><p class=\"p1\"><strong>CrowdStrike Falcon client package<\/strong><span class=\"s1\"> (<code>.pkg<\/code>).<\/span><\/p><\/li><li><p class=\"p1\"><strong>Customer Identification (CID)<\/strong><span class=\"s1\"> and <\/span><strong>Grouping Tag<\/strong><span class=\"s1\"> provided by CrowdStrike.<\/span><\/p><\/li><li><p class=\"p1\"><strong><span class=\"s1\">Activation Script<\/span><\/strong> (for agent licensing).<\/p><\/li><li><p class=\"p1\"><strong>Full Disk Access policy<\/strong><span class=\"s1\"> (via configuration profile).<\/span><\/p><\/li><li><p class=\"p1\"><strong><span class=\"s1\">Custom <code>.mobileconfig<\/code> profile<\/span><\/strong>.<\/p><\/li><li><p class=\"p1\"><strong><span class=\"s1\">Web Content Filter Configuration<\/span><\/strong> to ensure full protection coverage.<\/p><\/li><li><p class=\"p1\"><strong><span class=\"s1\">1 Applivery license<\/span><\/strong> for App Distribution.<\/p><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d4f9691 elementor-widget elementor-widget-heading\" data-id=\"d4f9691\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Prepare CrowdStrike Falcon<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4596655 elementor-widget elementor-widget-text-editor\" data-id=\"4596655\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>To deploy CrowdStrike Falcon using Applivery, you will need to upload the compressed app package (<code>.zip<\/code>) to your App Distribution section and configure it with a post-installation activation script.<\/p><p>First, download the CrowdStrike Falcon <code>.pkg<\/code> installer from your <strong>CrowdStrike dashboard<\/strong> and make sure to copy your <strong>CID<\/strong> and <strong>Grouping Tag<\/strong>, as you\u2019ll need these later for the activation script.<\/p><p>Once downloaded, compress the <code>.pkg<\/code> file by right-clicking on it and selecting <strong>Compress<\/strong>, which will generate the <code>.zip<\/code> file required by Applivery.<\/p><p>Next, log in to the <a href=\"https:\/\/dashboard.applivery.io\">Applivery dashboard<\/a> and navigate to the <strong>App Distribution <\/strong>section. From there, follow the steps outlined in our documentation:<\/p><ol><li style=\"font-size: 17px;\"><a href=\"https:\/\/www.applivery.com\/docs\/getting-started\/how-to-create-your-first-app\/\">Create your first app<\/a>.<\/li><li style=\"font-size: 17px;\"><a href=\"https:\/\/www.applivery.com\/docs\/getting-started\/how-to-upload-your-first-build\/\">Upload your first build<\/a>.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4a5fb51 elementor-widget elementor-widget-image\" data-id=\"4a5fb51\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"509\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-1024x651.png\" class=\"attachment-large size-large wp-image-49687\" alt=\"app-distribution\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-1024x651.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-300x191.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-768x488.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-1536x977.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-2048x1302.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/Screenshot-2024-10-23-at-211856-360x229.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" title=\"app-distribution | Applivery\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ba0f5c1 elementor-widget elementor-widget-heading\" data-id=\"ba0f5c1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Configure your CrowdStrike Falcon policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b3a520 elementor-widget elementor-widget-text-editor\" data-id=\"2b3a520\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Once in the <a href=\"https:\/\/dashboard.applivery.io\">Applivery dashboard<\/a>, head to the <strong>Device Management<\/strong> section and select <strong>Policies<\/strong> <span style=\"color: #ff0000;\">(1)<\/span>. Choose the policy where you want to deploy the app. From the left-hand menu, select\u00a0the <strong><span class=\"s1\">Apps<\/span><\/strong> <span style=\"color: #ff0000;\">(2) <\/span>section and click the <span class=\"button-add\">+ Add App<\/span> <span style=\"color: #ff0000;\">(3) <\/span>button.<\/p><p>In the modal view, navigate to the <strong><span class=\"s1\">Applivery<\/span><\/strong> <span style=\"color: #ff0000;\">(4) <\/span>tab to continue with the setup process.<\/p><p>Set the platform to <strong>macOS<\/strong> <span style=\"color: #ff0000;\">(5)<\/span>, choose <strong>Your Workspace<\/strong> <span style=\"color: #ff0000;\">(6)<\/span> as the app origin, and search for the <strong>CrowdStrike Falcon<\/strong>\u00a0app you previously created in the app dropdown <span style=\"color: #ff0000;\">(7)<\/span>. For the build selection, choose <strong>Last<\/strong> <span style=\"color: #ff0000;\">(8)<\/span> to ensure the latest version is always deployed.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-49d8543 elementor-widget elementor-widget-image\" data-id=\"49d8543\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"521\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-1024x667.png\" class=\"attachment-large size-large wp-image-58692\" alt=\"\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-1024x667.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-300x195.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-768x500.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-1536x1000.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-2048x1333.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-falcon-360x234.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" title=\"crowdstrike-falcon | Applivery\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b4a2cc8 elementor-widget elementor-widget-text-editor\" data-id=\"b4a2cc8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Continue to the next step and select your preferred <strong>install mode<\/strong>\u2014<strong>Force Install<\/strong>, <strong>Required for setup<\/strong>, or <strong>Available<\/strong>\u2014depending on your deployment strategy.<\/p><p class=\"p1\">In the <strong>Configuration<\/strong> section, select <strong>Post-install<\/strong> <span style=\"color: #ff0000;\">(9) <\/span>and paste your Activation Script, making sure to replace the placeholder values with your actual <strong>CID<\/strong> and <strong>Grouping Tag<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c113a65 elementor-widget elementor-widget-image\" data-id=\"c113a65\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"521\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-1024x667.png\" class=\"attachment-large size-large wp-image-58709\" alt=\"post-install-script\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-1024x667.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-300x195.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-768x500.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-1536x1000.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-2048x1333.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/post-install-script-360x234.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" title=\"post-install-script | Applivery\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cdb893d elementor-widget elementor-widget-heading\" data-id=\"cdb893d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Activation Script<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-414ce11 elementor-widget elementor-widget-code-highlight\" data-id=\"414ce11\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-bash line-numbers\">\n\t\t\t\t<code readonly=\"true\" class=\"language-bash\">\n\t\t\t\t\t<xmp>#!\/bin\/bash\n\n# Configure CID and Grouping Tag <----- MODIFY WITH YOUR VARIABELES\nCID=\"CID\"\nGROUPING_TAG=\"TAG\" #OPTIONAL\n\n# Apply CID license\nsudo \/Applications\/Falcon.app\/Contents\/Resources\/falconctl license \"$CID\"\n\n# Set Grouping Tag. Comment it if you will not use tags.\nsudo \/Applications\/Falcon.app\/Contents\/Resources\/falconctl grouping-tags set \"$GROUPING_TAG\"\n\n# Restart the service to apply changes\nsudo \/Applications\/Falcon.app\/Contents\/Resources\/falconctl unload\nsudo \/Applications\/Falcon.app\/Contents\/Resources\/falconctl load\n\necho \"Configuration successfully updated.\"<\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e0af77c elementor-widget elementor-widget-heading\" data-id=\"e0af77c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Full Disk Access policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6d4a3df elementor-widget elementor-widget-text-editor\" data-id=\"6d4a3df\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">To ensure the proper functioning of the agent after installation, we must grant it Full Disk Access permissions. This can be done by editing the same policy in which the agent was deployed.<\/p><p class=\"p1\">Within the policy, begin by selecting <strong><span class=\"s1\">+Add Configuration<\/span><\/strong> <span class=\"s1\"><span style=\"color: #ff0000;\">(10) <\/span><\/span> from the menu on the left-hand side, and then choose the <strong><span class=\"s1\">Privacy Preferences Policy Control<\/span><\/strong> <span class=\"s1\"><span style=\"color: #ff0000;\">(11) <\/span><\/span>configuration.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9708711 elementor-widget elementor-widget-image\" data-id=\"9708711\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"521\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-1024x667.png\" class=\"attachment-large size-large wp-image-58698\" alt=\"\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-1024x667.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-300x195.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-768x500.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-1536x1000.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-2048x1333.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/privacy-preferences-policy-control-360x234.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" title=\"privacy-preferences-policy-control | Applivery\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3143af2 elementor-widget elementor-widget-text-editor\" data-id=\"3143af2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">Next, we\u2019ll add two entries related to <strong><span class=\"s1\">System Policy All Files<\/span><\/strong>. For each element added to this configuration, set the access to <strong><span class=\"s1\">Allowed<\/span><\/strong>.<\/p><p class=\"p1\">The first configuration should include the following params:<\/p><ul><li><strong>Code requirement<\/strong>:<\/li><\/ul><p><code>identifier \"com.crowdstrike.falcon.Agent\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] \/* exists \/ and certificate leaf[field.1.2.840.113635.100.6.1.13] \/ exists *\/ and certificate leaf[subject.OU] = X9E956P446<\/code><\/p><ul><li><strong>Identifier<\/strong>: <code>com.crowdstrike.falcon.Agent<\/code>.<\/li><li><strong>Identifier Type<\/strong>: Bundle ID.<\/li><li><strong>Static Code<\/strong>: Disabled.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4802bfd elementor-widget elementor-widget-text-editor\" data-id=\"4802bfd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">For the second configuration:<\/p>\n\n<ul>\n \t<li><strong>Code requirement<\/strong>:<\/li>\n<\/ul>\n<code>identifier \"com.crowdstrike.falcon.App\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] \/* exists \/ and certificate leaf[field.1.2.840.113635.100.6.1.13] \/ exists *\/ and certificate leaf[subject.OU] = X9E956P446<\/code>\n<ul>\n \t<li><strong>Identifier<\/strong>: <code>com.crowdstrike.falcon.App<\/code>.<\/li>\n \t<li><strong>Identifier Type<\/strong>: Bundle ID.<\/li>\n \t<li><strong>Static Code<\/strong>: Disabled.<\/li>\n<\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b29e24b elementor-widget elementor-widget-heading\" data-id=\"b29e24b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Custom CrowdStrike Falcon .mobileconfig<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2bb4386 elementor-widget elementor-widget-text-editor\" data-id=\"2bb4386\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">To apply the custom configuration, navigate to the desired policy and click <strong><span class=\"s1\">+ Add configuration <\/span><\/strong><span class=\"s1\"><span style=\"color: #ff0000;\">(12) <\/span><\/span>from the menu on the left-hand side.<\/p><p class=\"p1\">Then, select the <span class=\"button-add\">+ Import<\/span> <span style=\"color: #ff0000;\">(13) <\/span>button and paste the provided <code>.xml<\/code> content into the editor.<\/p><p class=\"p1\">Once done, make sure to <span class=\"button-add\">Save changes<\/span> to apply the configuration.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-979c688 elementor-widget elementor-widget-image\" data-id=\"979c688\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"521\" src=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-1024x667.png\" class=\"attachment-large size-large wp-image-58701\" alt=\"crowdstrike-xml\" srcset=\"https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-1024x667.png 1024w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-300x195.png 300w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-768x500.png 768w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-1536x1000.png 1536w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-2048x1333.png 2048w, https:\/\/www.applivery.com\/wp-content\/uploads\/2024\/10\/crowdstrike-xml-360x234.png 360w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" title=\"crowdstrike-xml | Applivery\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3dfa995 elementor-widget elementor-widget-code-highlight\" data-id=\"3dfa995\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-html line-numbers\">\n\t\t\t\t<code readonly=\"true\" class=\"language-html\">\n\t\t\t\t\t<xmp><?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-\/\/Apple\/\/DTD PLIST 1.0\/\/EN\" \"http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>PayloadDescription<\/key>\n\t<string>Network Content Filter, System Extensions, and Privacy Preferences<\/string>\n\t<key>PayloadDisplayName<\/key>\n\t<string>Crowdstrike Settings<\/string>\n\t<key>PayloadEnabled<\/key>\n\t<true\/>\n\t<key>PayloadIdentifier<\/key>\n\t<string>com.applivery.crowdstrike<\/string>\n\t<key>PayloadOrganization<\/key>\n\t<string>Applivery, Inc.<\/string>\n\t<key>PayloadRemovalDisallowed<\/key>\n\t<false\/>\n\t<key>PayloadScope<\/key>\n\t<string>System<\/string>\n\t<key>PayloadType<\/key>\n\t<string>Configuration<\/string>\n\t<key>PayloadUUID<\/key>\n\t<string>bbc888dc-6f2c-479d-9f3a-ce0593e6420e<\/string>\n\t<key>PayloadVersion<\/key>\n\t<integer>1<\/integer>\n\t<key>PayloadContent<\/key>\n\t<array>\n\t\t<dict>\n\t\t\t<key>FilterBrowsers<\/key>\n\t\t\t<false\/>\n\t\t\t<key>FilterDataProviderBundleIdentifier<\/key>\n\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t<key>FilterDataProviderDesignatedRequirement<\/key>\n\t\t\t<string>identifier \"com.crowdstrike.falcon.Agent\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = \"X9E956P446\"<\/string>\n\t\t\t<key>FilterGrade<\/key>\n\t\t\t<string>inspector<\/string>\n\t\t\t<key>FilterPacketProviderBundleIdentifier<\/key>\n\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t<key>FilterPacketProviderDesignatedRequirement<\/key>\n\t\t\t<string>identifier \"com.crowdstrike.falcon.Agent\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = \"X9E956P446\"<\/string>\n\t\t\t<key>FilterPackets<\/key>\n\t\t\t<false\/>\n\t\t\t<key>FilterSockets<\/key>\n\t\t\t<true\/>\n\t\t\t<key>FilterType<\/key>\n\t\t\t<string>Plugin<\/string>\n\t\t\t<key>Organization<\/key>\n\t\t\t<string>CrowdStrike Inc.<\/string>\n\t\t\t<key>PayloadDisplayName<\/key>\n\t\t\t<string>Web Content Filter<\/string>\n\t\t\t<key>PayloadIdentifier<\/key>\n\t\t\t<string>io.applivery.crowdstrike.2C5CBFD0-7CFE-41CB-95BC-A681F4D293B8<\/string>\n\t\t\t<key>PayloadType<\/key>\n\t\t\t<string>com.apple.webcontent-filter<\/string>\n\t\t\t<key>PayloadUUID<\/key>\n\t\t\t<string>2C5CBFD0-8CFE-41CB-95BC-A681F4D293B8<\/string>\n\t\t\t<key>PayloadVersion<\/key>\n\t\t\t<integer>1<\/integer>\n\t\t\t<key>PluginBundleID<\/key>\n\t\t\t<string>com.crowdstrike.falcon.App<\/string>\n\t\t\t<key>UserDefinedName<\/key>\n\t\t\t<string>Falcon<\/string>\n\t\t<\/dict>\n\t\t<dict>\n\t\t\t<key>AllowUserOverrides<\/key>\n\t\t\t<true\/>\n\t\t\t<key>AllowedSystemExtensionTypes<\/key>\n\t\t\t<dict>\n\t\t\t\t<key>X9E956P446<\/key>\n\t\t\t\t<array>\n\t\t\t\t\t<string>EndpointSecurityExtension<\/string>\n\t\t\t\t\t<string>NetworkExtension<\/string>\n\t\t\t\t<\/array>\n\t\t\t<\/dict>\n\t\t\t<key>AllowedSystemExtensions<\/key>\n\t\t\t<dict>\n\t\t\t\t<key>X9E956P446<\/key>\n\t\t\t\t<array>\n\t\t\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t\t<\/array>\n\t\t\t<\/dict>\n\t\t\t<key>NonRemovableFromUISystemExtensions<\/key>\n\t\t\t<dict>\n\t\t\t\t<key>X9E956P446<\/key>\n\t\t\t\t<array>\n\t\t\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t\t<\/array>\n\t\t\t<\/dict>\n\t\t\t<key>PayloadDescription<\/key>\n\t\t\t<string>Configures System Extensions Policy settings<\/string>\n\t\t\t<key>PayloadDisplayName<\/key>\n\t\t\t<string>System Extensions<\/string>\n\t\t\t<key>PayloadIdentifier<\/key>\n\t\t\t<string>20258B06-5889-4424-8893-A3AF1AFAAEDC<\/string>\n\t\t\t<key>PayloadOrganization<\/key>\n\t\t\t<string>CrowdStrike Inc.<\/string>\n\t\t\t<key>PayloadType<\/key>\n\t\t\t<string>com.apple.system-extension-policy<\/string>\n\t\t\t<key>PayloadUUID<\/key>\n\t\t\t<string>20258B06-5889-4424-8893-A3AF1AFAAEDC<\/string>\n\t\t\t<key>PayloadVersion<\/key>\n\t\t\t<integer>1<\/integer>\n\t\t<\/dict>\n\t\t<dict>\n\t\t\t<key>NotificationSettings<\/key>\n\t\t\t<array>\n\t\t\t\t<dict>\n\t\t\t\t\t<key>BundleIdentifier<\/key>\n\t\t\t\t\t<string>com.crowdstrike.falcon.UserAgent<\/string>\n\t\t\t\t\t<key>NotificationsEnabled<\/key>\n\t\t\t\t\t<true\/>\n\t\t\t\t<\/dict>\n\t\t\t<\/array>\n\t\t\t<key>PayloadDisplayName<\/key>\n\t\t\t<string>Notifications<\/string>\n\t\t\t<key>PayloadIdentifier<\/key>\n\t\t\t<string>61090B22-3DCD-435E-ABB2-BE997B3CB78D<\/string>\n\t\t\t<key>PayloadType<\/key>\n\t\t\t<string>com.apple.notificationsettings<\/string>\n\t\t\t<key>PayloadUUID<\/key>\n\t\t\t<string>61090B22-3DCD-435E-ABB2-BE997B3CB78D<\/string>\n\t\t\t<key>PayloadVersion<\/key>\n\t\t\t<integer>1<\/integer>\n\t\t<\/dict>\n\t\t<dict>\n\t\t\t<key>PayloadDescription<\/key>\n\t\t\t<string>Configures Privacy Preferences Policy Control settings<\/string>\n\t\t\t<key>PayloadDisplayName<\/key>\n\t\t\t<string>Privacy Preferences<\/string>\n\t\t\t<key>PayloadIdentifier<\/key>\n\t\t\t<string>9A10BE5D-5E57-4C22-89C9-20597A04B616<\/string>\n\t\t\t<key>PayloadOrganization<\/key>\n\t\t\t<string>CrowdStrike Inc.<\/string>\n\t\t\t<key>PayloadType<\/key>\n\t\t\t<string>com.apple.TCC.configuration-profile-policy<\/string>\n\t\t\t<key>PayloadUUID<\/key>\n\t\t\t<string>9A10BE5D-5E57-4C22-89C9-20597A04B616<\/string>\n\t\t\t<key>PayloadVersion<\/key>\n\t\t\t<integer>1<\/integer>\n\t\t\t<key>Services<\/key>\n\t\t\t<dict>\n\t\t\t\t<key>SystemPolicyAllFiles<\/key>\n\t\t\t\t<array>\n\t\t\t\t\t<dict>\n\t\t\t\t\t\t<key>Allowed<\/key>\n\t\t\t\t\t\t<true\/>\n\t\t\t\t\t\t<key>CodeRequirement<\/key>\n\t\t\t\t\t\t<string>identifier \"com.crowdstrike.falcon.Agent\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] \/* exists *\/ and certificate leaf[field.1.2.840.113635.100.6.1.13] \/* exists *\/ and certificate leaf[subject.OU] = \"X9E956P446\"<\/string>\n\t\t\t\t\t\t<key>Comment<\/key>\n\t\t\t\t\t\t<string><\/string>\n\t\t\t\t\t\t<key>Identifier<\/key>\n\t\t\t\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t\t\t\t<key>IdentifierType<\/key>\n\t\t\t\t\t\t<string>bundleID<\/string>\n\t\t\t\t\t\t<key>StaticCode<\/key>\n\t\t\t\t\t\t<false\/>\n\t\t\t\t\t<\/dict>\n\t\t\t\t\t<dict>\n\t\t\t\t\t\t<key>Allowed<\/key>\n\t\t\t\t\t\t<true\/>\n\t\t\t\t\t\t<key>CodeRequirement<\/key>\n\t\t\t\t\t\t<string>identifier \"com.crowdstrike.falcon.App\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] \/* exists *\/ and certificate leaf[field.1.2.840.113635.100.6.1.13] \/* exists *\/ and certificate leaf[subject.OU] = X9E956P446<\/string>\n\t\t\t\t\t\t<key>Comment<\/key>\n\t\t\t\t\t\t<string>\n\t\t\t\t\t\t\t<\/string>\n\t\t\t\t\t\t<key>Identifier<\/key>\n\t\t\t\t\t\t<string>com.crowdstrike.falcon.App<\/string>\n\t\t\t\t\t\t<key>IdentifierType<\/key>\n\t\t\t\t\t\t<string>bundleID<\/string>\n\t\t\t\t\t\t<key>StaticCode<\/key>\n\t\t\t\t\t\t<false\/>\n\t\t\t\t\t<\/dict>\n\t\t\t\t<\/array>\n\t\t\t<\/dict>\n\t\t<\/dict>\n\t<\/array>\n\t<key>PayloadDescription<\/key>\n\t<string><\/string>\n\t<key>PayloadDisplayName<\/key>\n\t<string>Crowdstrike Falcon Content Filter<\/string>\n\t<key>PayloadEnabled<\/key>\n\t<true\/>\n\t<key>PayloadRemovalDisallowed<\/key>\n\t<true\/>\n\t<key>PayloadScope<\/key>\n\t<string>System<\/string>\n\t<key>PayloadType<\/key>\n\t<string>Configuration<\/string>\n\t<key>PayloadVersion<\/key>\n\t<integer>1<\/integer>\n<\/dict>\n<\/plist><\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6a47126 elementor-widget elementor-widget-heading\" data-id=\"6a47126\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Web Content Filter<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c29ae3c elementor-widget elementor-widget-text-editor\" data-id=\"c29ae3c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"p1\">We will now add a new configuration by selecting <strong><span class=\"s1\">+ Add configuration <\/span><\/strong>from the menu on the left-hand side.<\/p>\n<p class=\"p1\">Select again the <span class=\"button-add\">+ Import<\/span> buton and paste the following <code>.xml<\/code> content.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc38383 elementor-widget elementor-widget-code-highlight\" data-id=\"fc38383\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"code-highlight.default\">\n\t\t\t\t\t\t\t<div class=\"prismjs-default copy-to-clipboard \">\n\t\t\t<pre data-line=\"\" class=\"highlight-height language-html line-numbers\">\n\t\t\t\t<code readonly=\"true\" class=\"language-html\">\n\t\t\t\t\t<xmp><?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-\/\/Apple\/\/DTD PLIST 1.0\/\/EN\" \"http:\/\/www.apple.com\/DTDs\/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>PayloadContent<\/key>\n\t<array>\n\t\t<dict>\n\t\t\t<key>FilterDataProviderBundleIdentifier<\/key>\n\t\t\t<string>com.crowdstrike.falcon.Agent<\/string>\n\t\t\t<key>FilterDataProviderDesignatedRequirement<\/key>\n\t\t\t<string>identifier \"com.crowdstrike.falcon.Agent\" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] and certificate leaf[field.1.2.840.113635.100.6.1.13] and certificate leaf[subject.OU] = \"X9E956P446\"<\/string>\n\t\t\t<key>FilterGrade<\/key>\n\t\t\t<string>inspector<\/string>\n\t\t\t<key>FilterPackets<\/key>\n\t\t\t<false\/>\n\t\t\t<key>FilterSockets<\/key>\n\t\t\t<true\/>\n\t\t\t<key>FilterType<\/key>\n\t\t\t<string>Plugin<\/string>\n\t\t\t<key>Organization<\/key>\n\t\t\t<string>CrowdStrike Inc.<\/string>\n\t\t\t<key>PayloadDisplayName<\/key>\n\t\t\t<string>Web Content Filter Payload<\/string>\n\t\t\t<key>PayloadOrganization<\/key>\n\t\t\t<string>Applivery<\/string>\n\t\t\t<key>PayloadType<\/key>\n\t\t\t<string>com.apple.webcontent-filter<\/string>\n\t\t\t<key>PayloadVersion<\/key>\n\t\t\t<integer>1<\/integer>\n\t\t\t<key>PluginBundleID<\/key>\n\t\t\t<string>com.crowdstrike.falcon.App<\/string>\n\t\t\t<key>UserDefinedName<\/key>\n\t\t\t<string>Falcon<\/string>\n\t\t<\/dict>\n\t<\/array>\n\t<key>PayloadDescription<\/key>\n\t<string><\/string>\n\t<key>PayloadDisplayName<\/key>\n\t<string>Crowdstrike Falcon Content Filter<\/string>\n\t<key>PayloadEnabled<\/key>\n\t<true\/>\n\t<key>PayloadRemovalDisallowed<\/key>\n\t<true\/>\n\t<key>PayloadScope<\/key>\n\t<string>System<\/string>\n\t<key>PayloadType<\/key>\n\t<string>Configuration<\/string>\n\t<key>PayloadVersion<\/key>\n\t<integer>1<\/integer>\n<\/dict>\n<\/plist><\/xmp>\n\t\t\t\t<\/code>\n\t\t\t<\/pre>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Learn how to deploy and configure the CrowdStrike Falcon sensor app to your macOS devices using Applivery.<\/p>\n","protected":false},"author":5,"featured_media":32390,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"footnotes":""},"product":[315],"doc_category":[332],"doc_tag":[],"class_list":["post-49623","docs","type-docs","status-publish","format-standard","has-post-thumbnail","hentry","product-apple-mdm","doc_category-macos"],"aioseo_notices":[],"year_month":"2026-05","word_count":403,"total_views":"6516","reactions":{"happy":"0","normal":"0","sad":"1"},"author_info":{"name":"Karla Makowski","author_nicename":"karla-makowski","author_url":"https:\/\/www.applivery.com\/pt-br\/blog\/author\/karla-makowski\/"},"doc_category_info":[{"term_name":"macOS","term_url":"https:\/\/www.applivery.com\/docs\/mobile-device-management\/apple-mdm\/macos\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/49623","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/comments?post=49623"}],"version-history":[{"count":27,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/49623\/revisions"}],"predecessor-version":[{"id":58733,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/docs\/49623\/revisions\/58733"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/media\/32390"}],"wp:attachment":[{"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/media?parent=49623"}],"wp:term":[{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/product?post=49623"},{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/doc_category?post=49623"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.applivery.com\/pt-br\/wp-json\/wp\/v2\/doc_tag?post=49623"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}