Skip to main content

VMware Carbon Black Cloud sensor recipe (macOS)

Description

VMware Carbon Black is a powerful endpoint protection solution that plays a critical role in an organization's cybersecurity strategy. Deploying Carbon Black via the installer package through the admin console is a strategic approach that ensures consistent, efficient, and effective endpoint security. By mastering this deployment process, organizations can enhance their cybersecurity posture, mitigate threats proactively, and protect their digital assets in an increasingly dangerous digital landscape.

Ingredients

  • FileWave Central

  • VMwave Carbon Black Cloud installer and doc

  • VMware CBC license code
  • VMware CBC uninstaller code
  • System Extension mobile configuration
  • Network Extension Web Content Filter mobile configuration
  • TCC Privacy Policy mobile configuration
macOS Kext Approval
FileWave Download.png
macOS TCC Profile
FileWave Download.png
macOS System Ext
FileWave Download.png
VMware CBC Fileset
FileWave Download.png

Directions

Please note this recipe includes Carbon Black Cloud sensor (CB Defense) 3.7.4.53. This version is supported on MacOS 11.0 and newer.

Creating the VMware Carbon Black Cloud Fileset

You will first want to grab and download your VMware installations and profiles. The .dmg will need to be mounted first and then extract the necessary components from this file.

Once the .dmg has been mounted you will see the contents listed. Below is the CBCloud Install.pkg and doc folder containing the required MDM profiles.

VMwareCBCSensor01.png

Listed MDM profiles and unattended script for Fileset deployed are found in the docs folder within the mounted .dmg.

VMwareCBCSensor05.png

Extract the three MDM profiles. These MDM profiles will be uploaded into FileWave Central. Below are the configuration for the three MDM profiles:

Kernel Extension Policy

VMwareCBCSensor02.png

 

Web Content Filter Policy

VMwareCBCSensor03.png


Notes