Viewable by the world

Purpose of Knowledge Article

  • A guide on how to install CrowdStrike Falcon via BigFix Offer on macOS

Resolution

1Click Dismiss when you see the BigFix CrowdStrike Falcon offer

2Click on BigFix icon on the top right corner of the menu bar

3Select "CrowdStrike MacOS Installation via BigFix"

4Click Accept
5

Click Take Action

The installation will run in the background and it may take a few minutes before you see the next window. You can click on the Progress tab in BigFix to see the status.

6Read the message in the following popup then click OK

7

Click Allow to the popup saying "com.crowdstrike.falcon.app would like to filter network content"

OR

Click Allow to the popup saying "Falcon would like to filter network content"


Note: you may see this popup more than once

8

macOS 11 Big Sur/12 Monterey:

  • Click Open Security Preferences

macOS 13 Ventura: 

  • Click Open System Settings 
macOS 11 Big Sur/12 MontereymacOS 13 Ventura
9

macOS 11 Big Sur/12 Monterey:

    • Click Security & Privacy

macOS 13 Ventura: 

    • On the left column, select Privacy & Security
macOS 11 Big Sur/12 MontereymacOS 13 Ventura
10

macOS 11 Big Sur/12 Monterey:

    • Select the General tab and look for "System software from application "Falcon" was blocked from loading". Click Allow and type in your computer password

macOS 13 Ventura:

    • On the right-hand column, look for "System software from application "Falcon" was blocked from loading". Click Allow and type in your computer password, if asked
macOS 11 Big Sur/12 MontereymacOS 13 Ventura
11Click Dismiss

12

BigFix will prompt you to restart the computer, click Snooze

Continue to Part 2 - CrowdStrike Falcon Permissions

Purpose of Knowledge Article

Guide on how to give CrowdStrike Falcon permission on macOS 11 Big Sur and 12 Monterey

Resolution

1Click the Apple icon on the top left corner


2Click System Preferences
3Click Security & Privacy


4Click the Lock icon on the bottom left corner


5Type in your computer password
6Click Unlock
7Select Privacy tab
8On the left column, find and select Full Disk Access

9

Check the box for Agent, or Falcon Sensor

Note: instead of Agent, it may also be called Falcon Sensor

10Click the + icon
11Navigate to /Application/Falcon or Falcon.app and select it

12

Click Open

13

Now, both the box for Agent (or Falcon Sensor) and Falcon should be checked

You are done, close System Preferences


Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

14

Remember this screen? You can click Finish now

Purpose of Knowledge Article

Guide on how to give CrowdStrike Falcon permission on macOS 13 and newer

Resolution

1Click the Apple icon on the top left corner


2Click System Settings
3Select Privacy & Security on the left column


4Select Full Disk Access on the right side


5

Toggle the slider to on for Agent, or Falcon Sensor

Note: instead of Agent, it may be called Falcon Sensor instead. You will only see on of them, not both.

6Type in your computer password
7Click Unlock
8Click the + icon
9Navigate to /Application/Falcon or Falcon.app and select it

10

Click Open

11

Now, the sliders for Agent (or Falcon Sensor) and Falcon should both be toggled on

You are done, close System Settings


Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling.

12

Remember this screen? You can click Finish now

If you do not see this screen, see Is CrowdStrike Falcon Running? and do method 1 for Apple.




  • No labels