In this article
This article outlines how to install the macOS Roaming Client beta version 2.0.0. This version introduces a new way the macOS Roaming Client works, changing it into a system extension filtering proxy, adding a huge amount of reliability to the agent.
What’s new with this beta?
The biggest change is that the Roaming Client has an optional configuration to change it into a proxy. End-users have the ability to turn the proxy on/off when needed, and change their system DNS without interfering with the agent.
This beta agent is currently not available for new download. Follow our changelog to be notified when the next beta is available.
Install the macOS beta agent on a single device
Follow these steps to manually deploy the Roaming Client.
Step one: Prepare and begin the install
-
From the DNSFilter dashboard, navigate to Roaming Clients
- Select Install Guide
-
Select a Site to associate the agent with
-
Copy the Site Secret Key (SSK)
-
Download the Beta 2.0.0 installer
-
Start the installation, agreeing to any prompts, including entering the SSK
-
From Finder, navigate to Applications and double-click DNSFilter
-
This opens the System Tray icon for the proxy
-
Step two: Edit the daemon.conf file
-
Navigate to Application Support
-
From the Finder menu bar, select Go
-
Select Go to Folder
-
Enter
/Library/Application Support
-
-
Update the DNSFilter Agent permissions to Read & Write
-
Update the daemon.conf file permissions to Read & Write
-
Editing this file enables the system extension proxy
-
-
Open the daemon.conf file in a text editor of choice
-
At the top of the file, enter this command:
operation_mode = "proxy"
-
Save and Close the file
Step three: Install and enable the macOS Roaming Client
- From Terminal, Unload and Load the agent:
- Unload:
sudo launchctl unload /Library/LaunchDaemons/com.dnsfilter.agent.macos.helper.plist
- Load:
sudo launchctl load -w /Library/LaunchDaemons/com.dnsfilter.agent.macos.helper.plist
This action adds theoperation_mode="proxy"
configuration line to the agent
- Unload:
-
An System Extension Blocked prompt will appear: select Open System Settings
-
Select Allow to enable the extension
✍️ If you accidentally select OK in the prompt, navigate to Privacy & Security and scroll to the bottom: the DNSFilter will be listed. -
Navigate back to Terminal and enter this command:
systemextensionsctl list
-
The
[state]
should be[activated enabled]
. This indicates the System Extension installation was successful and the proxy is running as expected -
Install the proxy filter:
- From Terminal, enter this command:
/Applications/DNSFilter\ Agent.app/Contents/MacOS/DNSFilter\ Agent install_proxy_filter
-
A prompt labeled ‘DNSFilter’ would like to add DNS Proxy configurations will appear. Select Allow
- From Terminal, enter this command:
The proxy filter will now appear under Network Filters & Proxies and Filtering Policies will apply to the device.
Install via RMM tool
Installing the proxy with a remote management tool isn’t much different than our standard RMM deployment method, just edit the daemon.conf file before using the bash script. Apply a profile to devices which pre-approves the extension and proxy, including installing the root certificate. That way it can be installed and running before a user logs in for the first time.
Comments
3 comments
Hi Minetta Gould
Sadly I can't see the Beta 2.0.0 installer in my dashboard. See Screenshot: https://share.anykey.ch/sr5rWG36DJ0LbwDDDxYK
Hi Tobias Linder , thanks for reaching out! I apologize for the confusion: we pulled broad access to the 2.0.x beta and failed to update the documentation to reflect that change. These instructions are still valid, and we'll be sure to announce in the changelog when the next beta is ready!
Thank you Minetta Gould
Please sign in to leave a comment.