Resolving macOS Network Extension Approval Prompts During ControlUp Agent Deployment

When deploying the ControlUp macOS agent via ControlUp for Digital Experience (CU4D), users may encounter a system prompt asking for approval related to a Network Content Filter extension. This prompt is legitimate and a standard security feature of macOS. Apple requires explicit user or Mobile Device Management (MDM) approval for network extensions because they run in the background and have the capability to inspect network traffic.

The specific prompt appears due to the agent’s use of a network extension to facilitate Unified Communications and Collaboration (UC&C) live monitoring. While the agent itself continues functioning without this approval, enabling the extension is necessary to capture and provide real-time UC&C data, which is vital for comprehensive digital employee experience monitoring focused on communication tools and services.

Deployment of the ControlUp macOS agent often involves using remote control utilities like ScreenConnect, and configuration of these network extension approvals can be managed through MDM solutions such as Jamf or Microsoft Intune. By applying configuration profiles through MDM, administrators can reduce or prevent these approval prompts from appearing to end users, streamlining the deployment process and improving user experience.

For further details and step-by-step instructions on deploying the macOS agent and handling configuration profiles in MDM environments, refer to ControlUp’s official documentation at https://support.controlup.com/docs/configuration-profiles-for-mdm-deployment. This article has been validated with recent versions of Jamf and Intune, ensuring compatibility and applicability in modern macOS management setups.

Read the entire ‘Resolving macOS Network Extension Approval Prompts During ControlUp Agent Deployment’ thread below:

is this legit? popped up on a mac enrolled with CU4D

It is

thanks all I needed!

Has been there for a while

sounds good

just random and wanted to be sure

How do you deploy macOS agent?

Some of the user pop ups can be prevented with configuration profiles through mdm

Ill have to ask the guys but pretty sure using our remote control utility ScreenConnect

and I assume we need to have the users go in and accept?

Lol

hahaha

Yes. Let me check again what that one is used for

It’s for UC&C live monitoring

Because that extension is a Network Content Filter, Apple requires an explicit user (or MDM) approval. The text in the dialog is Apple’s standard wording: network extensions run in the background and can inspect traffic.

If you don’t grant it, the agent should still work, but you won’t get live UC&C data

It also popped up on my side it’s for the new version that was for macOS that’s now GA

That’s right

Very useful article from. I personally validated jamf and Intune recently

Continue reading and comment on the thread ‘Resolving macOS Network Extension Approval Prompts During ControlUp Agent Deployment’.  Not a member? Join Here!