Purpose of Knowledge Article
- A guide on how to install CrowdStrike Falcon via BigFix Popup on macOS
Resolution
| 1 | Click Take Action The installation will run in the background and it may take a few minutes before you see the next window. You can click on the Progress tab in BigFix to see the status.
|
| ||||
| 2 | A window will pop up saying "PLEASE NOTE: This installation process requires user interaction and a computer reboot." Click OK The installation will run in the background and it may take a few minutes before you see the next window |
| ||||
| 3 | Click Allow to the popup saying "com.crowdstrike.falcon.app would like to filter network content" OR Click Allow to the popup saying "Falcon would like to filter network content" Note: you may see this popup more than once |
| ||||
| 4 | macOS 11 Big Sur/12 Monterey:
macOS 13 Ventura:
|
| ||||
| 5 | macOS 11 Big Sur/12 Monterey:
macOS 13 Ventura:
|
| ||||
| 6 | macOS 11 Big Sur/12 Monterey:
macOS 13 Ventura:
|
| ||||
| 7 | Click Dismiss |
| ||||
| 8 | BigFix will prompt you to restart the computer, click Snooze Continue to Step 2 - CrowdStrike Falcon Permissions |
|
Purpose of Knowledge Article
Guide on how to give CrowdStrike Falcon permission on macOS 11 Big Sur and 12 Monterey
Resolution
| 1 | Click the Apple icon on the top left corner |
|
| 2 | Click System Preferences | |
| 3 | Click Security & Privacy |
|
| 4 | Click the Lock icon on the bottom left corner |
|
| 5 | Type in your computer password | |
| 6 | Click Unlock | |
| 7 | Select Privacy tab | |
| 8 | On the left column, find and select Full Disk Access |
|
| 9 | Check the box for Agent, or Falcon Sensor Note: instead of Agent, it may also be called Falcon Sensor | |
| 10 | Click the + icon | |
| 11 | Navigate to /Application/Falcon or Falcon.app and select it |
|
| 12 | Click Open | |
| 13 | Now, both the box for Agent (or Falcon Sensor) and Falcon should be checked You are done, close System Preferences Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling. |
|
| 14 | Remember this screen? You can click Finish now |
|
Purpose of Knowledge Article
Guide on how to give CrowdStrike Falcon permission on macOS 13 and newer
Resolution
| 1 | Click the Apple icon on the top left corner |
|
| 2 | Click System Settings | |
| 3 | Select Privacy & Security on the left column |
|
| 4 | Select Full Disk Access on the right side | |
| 5 | Toggle the slider to on for Agent, or Falcon Sensor Note: instead of Agent, it may be called Falcon Sensor instead. You will only see on of them, not both.
|
|
| 6 | Type in your computer password | |
| 7 | Click Unlock | |
| 8 | Click the + icon | |
| 9 | Navigate to /Application/Falcon or Falcon.app and select it |
|
| 10 | Click Open | |
| 11 | Now, the sliders for Agent (or Falcon Sensor) and Falcon should both be toggled on You are done, close System Settings Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling. |
|
| 12 | Remember this screen? You can click Finish now If you do not see this screen, see Is CrowdStrike Falcon Running? and do method 1 for Apple. |
|
