Purpose of Knowledge Article
- A guide on how to install CrowdStrike Falcon via BigFix Popup on macOS
Part 1 - Install CrowdStrike Falcon Through BigFix Popup
1 | | |
2 | A window will pop up saying "PLEASE NOTE: This installation process requires user interaction and a computer reboot." Click OK
The installation will run in the background and it may take a few minutes before you see the next window | |
3 | Click Allow to the popup saying "com.crowdstrike.falcon.app would like to filter network content" OR Click Allow to the popup saying "Falcon would like to filter network content"
Note: you may see this popup more than once | |
4 | macOS 11 Big Sur/12 Monterey: - Click Open Security Preferences
macOS 13 Ventura: - Click Open System Settings
| macOS 11 Big Sur/12 Monterey | macOS 13 Ventura | | |
|
5 | macOS 11 Big Sur/12 Monterey: macOS 13 Ventura: - On the left column, select Privacy & Security
| macOS 11 Big Sur/12 Monterey | macOS 13 Ventura | | |
|
6 | macOS 11 Big Sur/12 Monterey: - Select the General tab and look for "System software from application "Falcon" was blocked from loading". Click Allow and type in your computer password
macOS 13 Ventura: - On the right-hand column, look for "System software from application "Falcon" was blocked from loading". Click Allow and type in your computer password, if asked
| macOS 11 Big Sur/12 Monterey | macOS 13 Ventura | | |
|
7 | Click Dismiss | |
8 | BigFix will prompt you to restart the computer, click Snooze Continue to Step 2 - CrowdStrike Falcon Permissions
| |
Part 2 - CrowdStrike Falcon Permissions
macOS 11 Big Sur and 12 Monterey
Purpose of Knowledge Article
Guide on how to give CrowdStrike Falcon permission on macOS 11 Big Sur and 12 Monterey
1 | Click the Apple icon on the top left corner | |
2 | Click System Preferences |
3 | Click Security & Privacy | |
4 | Click the Lock icon on the bottom left corner | |
5 | Type in your computer password |
6 | Click Unlock |
7 | Select Privacy tab |
8 | On the left column, find and select Full Disk Access | |
9 | Check the box for Agent, or Falcon Sensor Note: instead of Agent, it may also be called Falcon Sensor |
10 | Click the + icon |
11 | Navigate to /Application/Falcon or Falcon.app and select it | |
12 | |
13 | Now, both the box for Agent (or Falcon Sensor) and Falcon should be checked You are done, close System Preferences
Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling. | |
14 | Remember this screen? You can click Finish now | |
macOS 13 Ventura
Purpose of Knowledge Article
Guide on how to give CrowdStrike Falcon permission on macOS 13 Ventura
1 | Click the Apple icon on the top left corner | |
2 | Click System Settings |
3 | Select Privacy & Security on the left column | |
4 | Select Full Disk Access on the right side
|
5 | Toggle the slider to on for Agent, or Falcon Sensor | |
6 | Type in your computer password |
7 | Click Unlock |
8 | Click the + icon |
9 | Navigate to /Application/Falcon or Falcon.app and select it | |
10 | |
11 | Now, the sliders for Agent (or Falcon Sensor) and Falcon should both be toggled on You are done, close System Settings
Note: if you have Sophos, you will need to restart the computer for Sophos to finish uninstalling. | |
12 | Remember this screen? You can click Finish now | |