In this article

This article outlines how to install the macOS Roaming Client beta version 2.0.0. This version introduces a new way the macOS Roaming Client works, changing it into a system extension filtering proxy, adding a huge amount of reliability to the agent.

What’s new with this beta?

The biggest change is that the Roaming Client has an optional configuration to change it into a proxy. End-users have the ability to turn the proxy on/off when needed, and change their system DNS without interfering with the agent.

This beta agent is currently only available in the branded version. 

Install the macOS beta agent on a single device

Follow these steps to manually deploy the Roaming Client.  

Step one: Prepare and begin the install

1. From the DNSFilter dashboard, navigate to Roaming Clients and tab to Install

2. Select a Site to associate the agent with

3. Copy the Site Secret Key (SSK)

4. Download the Beta 2.0.0 installer

5. Start the installation, agreeing to any prompts, including entering the SSK

6. From Finder, navigate to Applications and double-click DNSFilter

   1. This opens the System Tray icon for the proxy

Step two: Edit the daemon.conf file

1. Navigate to Application Support

   1. From the Finder menu bar, select Go

   2. Select Go to Folder

   3. Enter ~/Library/Application Support

2. Update the DNSFilter permissions to Read & Write

3. Update the daemon.conf file permissions to Read & Write

   1. Editing this file enables the system extension proxy

4. Open the daemon.conf file in a text editor of choice

5. At the top of the file, enter this command: operation_mode="proxy"

6. Save and Close the file

Step three: Install and enable the macOS Roaming Client

1. From Terminal, Unload and Load the agent:
   1. Unload:

      sudo launchctl unload /Library/LaunchDaemons/io.netalerts.agent.macos.helper.plist

   2. Load:

      launchctl load -w /Library/LaunchDaemons/com.dnsfilter.agent.macos.helper.plist

      This action adds the operation_mode="proxy" configuration line to the agent

2. An System Extension Blocked prompt will appear: select Open System Settings

3. Select Allow to enable the extension
   ✍️ If you accidentally select OK in the prompt, navigate to Privacy & Security and scroll to the bottom: the DNSFilter will be listed.

4. Navigate back to Terminal and enter this command: systemextensionsctl list

5. The [state] should be [activated enabled]. This indicates the System Extension installation was successful and the proxy is running as expected

6. Install the proxy filter:

   1. From Terminal, enter this command:
      

      /Applications/DNSFilter\ Agent.app/Contents/MacOS/DNSFilter\ Agent install_proxy_filter

   2. A prompt labeled ‘DNSFilter’ would like to add DNS Proxy configurations will appear. Select Allow

The proxy filter will now appear under Network Filters & Proxies and Filtering Policies will apply to the device.

Install via RMM tool

Installing the proxy with a remote management tool isn’t much different than our standard RMM deployment method, just edit the daemon.conf file before using the bash script. Apply a profile to devices which pre-approves the extension and proxy, including installing the root certificate. That way it can be installed and running before a user logs in for the first time.