New installation of WSS Agent / Unified Agent on macOS Catalina

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

New installation of WSS Agent (WSSA) / Unified Agent (UA) on macOS Catalina

Environment

Web Security Service

Unified Agent

WSS Agent

Resolution

Upgrading to macOS Catalina when WSS Agent / Unified Agent is already installed

If WSSA or UA is already installed when a machine is upgraded to macOS Catalina the agent will continue to function and nothing more needs to be done.

New install of WSS Agent / Unified Agent on macOS Catalina

When installing WSSA or UA on macOS Catalina, the user will need to provide a couple of approvals.

Approve Notifications

In order to support BNS notifications, etc, the user must click "Allow" when presented with this notification (this step is new with macOS Catalina):

Approve System Extension

If installing on an unmanaged device, the user must authorize the System Extension when presented with this dialog (this step is the same as is required on macOS High Sierra and later):

In the Security & Privacy preference pane, click on the lock and enter admin credentials

Note: for WSSA 5.1.1 and all versions of UA, "Blue Coat Systems" is shown here, in future releases "Symantec" will be shown.

Until the extension is approved, the WSS Agent status will show as "WSS Agent is not fully loaded".  A message which reads "Kernel extension needs authorization in System Preferences" will also be displayed in the WSS Agent UI.  During this time, your computer will not be protected (as the required components are not fully loaded).

Please see Technical Note TN2459 for full details.

You may also be presented with the following information dialog.  This is expected as we are currently using a legacy (KEXT) extensions.  A future release of WSSA will provide an updated system extension: